this post was submitted on 07 Feb 2025
383 points (99.0% liked)

Technology

62005 readers
4308 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
383
Time to get serious with E2E encrypted messaging (techcrunch.com)
submitted 4 days ago by Morys@lemmy.ml to c/technology@lemmy.world
121 comments fedilink hide all child comments
 

I currently use Telegram for my friends and family, but have reluctantly come to the conclusion that the UK Government is either reaching agreement for backdoors with messaging services, or is trying its hardest to.

I'm also on Element/Matrix. Before I try to get my contacts to join me on there, should I be aware of any privacy issues or is that a good place to head?

you are viewing a single comment's thread
view the rest of the comments
[–] TokyoMonsterTrucker@lemmy.dbzer0.com 9 points 2 days ago (1 children)

This is such a bad take it seems like deliberate misinformation.

Signal is open-source software maintained by a non-profit. User data is not stored on Signal servers, they have no way to access messages as they are stored and encrypted on your phone. If the Signal Foundation were revealed as bad actors then the open-source code could be forked to a new project.

Feel free to fully evaluate their code here: https://github.com/signalapp

[–] Adanisi@lemmy.zip -2 points 1 day ago (2 children)

That's the signal app. The software which runs on their servers is proprietary.

[–] Andromxda@lemmy.dbzer0.com 3 points 1 day ago (1 children)
[–] Adanisi@lemmy.zip 2 points 1 day ago (1 children)

TIL. Was it in the past?

[–] NotMyOldRedditName@lemmy.world 2 points 11 hours ago* (last edited 10 hours ago)

I'm with you on this, I strongly recall there was some sort of not fully open source portion of Signal at least at one point in time.

Edit: ya, they weren't updating server for awhile, so while there is an open source server, they definitely weren't running that code for awhile, and may not be running it today. Granted since the decryption happens client side, it shouldn't matter what the server does to some extent.

https://www.androidpolice.com/2021/04/06/it-looks-like-signal-isnt-as-open-source-as-you-thought-it-was-anymore/

[–] KingRandomGuy@lemmy.world 2 points 1 day ago

No, the server is on the github account linked above as well. The repo is here.

Signal however doesn't federate and does not generally support third-party clients.