this post was submitted on 01 Sep 2025
76 points (96.3% liked)

Open Source

40406 readers
120 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 6 years ago
MODERATORS
 

Is there any actual easy to use foss chat app my friends and SO could use ? Everyone uses fb messenger because its so easy. I cant find anything easy enough to make people switch to, that won't have issues and send them running back to zucc

you are viewing a single comment's thread
view the rest of the comments
[–] JoeBidet@lemmy.ml 2 points 2 days ago (1 children)

You’re lying.

Thanks! :)

But no. Happened to several friends of mine, out of the blue: phone# verification to their signal account. Therefore when accusing people of lying... you are lying! :)

It's not just about "having your phone number", it is indeed relating it to the phone numbers of all the people you interact with, and (at least) processing these data in the RAM of amazon servers while promising they do not use or store it. It is strongly identifying "strong selector" metadata that is incompatible with the protection of users' privacy.

You can call me a lier, but you better check your sources.

[–] Ulrich@feddit.org 0 points 2 days ago (1 children)

it is indeed relating it to the phone numbers of all the people you interact with

Please provide evidence when you make such wild claims.

[–] JoeBidet@lemmy.ml 0 points 2 days ago (1 children)

Evidence is: Signal still requires a phone# that is your unique identifier. Thus when connecting two parties, it is bound to have identifying metadata about them. (and that Signal still operates within AWS cloud, and is bound by US law: FISA, Patriot Act, etc.) How much more than this do you need?

[–] Ulrich@feddit.org 0 points 2 days ago* (last edited 2 days ago) (1 children)

Evidence is: Signal still requires a phone#

This does not even remotely resemble evidence.

Thus when connecting two parties, it is bound to have identifying metadata about them

No it isn't.

(and that Signal still operates within AWS cloud, and is bound by US law: FISA, Patriot Act, etc.)

There's no law in existence that requires them to store metadata or hand anything over to the feds. They have been subpoenaed several times and it always comes out the same: the only data they have is what I detailed above. Even if they DO have it (which they don't) they don't provide it, which is effectively the same thing.

How much more than this do you need?

Literally anything legitimate.

[–] JoeBidet@lemmy.ml 0 points 1 day ago (1 children)

There’s no law in existence that requires them to store metadata or hand anything over to the feds. They have been subpoenaed several times and it always comes out the same: the only data they have is what I detailed above. Even if they DO have it (which they don’t) they don’t provide it, which is effectively the same thing.

It is just enough that this metadata be handled within the computing environment of Amazon. Their refusal for anyone use their own server and federate with "their" (as in captive) users also prevents anyone for using it in any other way...

If you dont see that Signal requires that its users use a strong-selector phone# in order to use the service, there is nothing i can do for you.

[–] Ulrich@feddit.org 1 points 1 day ago* (last edited 1 day ago) (1 children)

If you're unable to explain or provide evidence as to why any of that is problematic, there's nothing I can do for you.

[–] cypherpunks@lemmy.ml 1 points 2 hours ago

Authorities don't need to ask Signal for metadata; Signal promises they don't log any themselves and that is probably true.

But, they outsource their server operation to Jeff Bezos, and then they do some absurd security theater to pretend that cryptography makes it so that the server (Amazon) couldn't possibly log metadata - which is obviously false.