641
submitted 4 months ago by 7eter@feddit.de to c/privacy@lemmy.ml
top 50 comments
sorted by: hot top controversial new old
[-] Fake4000@lemmy.world 106 points 4 months ago* (last edited 4 months ago)

Finally, been ages.

A number is still needed to register I believe.

[-] topinambour_rex@lemmy.world 73 points 4 months ago

Requiring a number is a good way to limit bots.

[-] shortwavesurfer@monero.town 29 points 4 months ago* (last edited 4 months ago)

A PoW could limit bots too. Require say 30 seconds of work before your registration submits. For regular users that isnt to bad. For bots its a PITA to get tons of accounts

Edit: tor uses PoW as DDOS protection and its helped massively

[-] BearOfaTime@lemm.ee 61 points 4 months ago
[-] Gork@lemm.ee 47 points 4 months ago

That will also keep away bots.

You can only sign up if you've taken at least one Prisoner of War. Bots can't take prisoners of war for obvious reasons.

Kinda like how Aztec boys came into age in their society.

[-] shortwavesurfer@monero.town 18 points 4 months ago* (last edited 4 months ago)

Proof of work. Example, bitcoin

[-] just_another_person@lemmy.world 33 points 4 months ago* (last edited 4 months ago)

How does this prove anything if using an emulator to bulk register bot accounts? Also, Signal Desktop is a thing.

[-] RobotToaster@mander.xyz 28 points 4 months ago* (last edited 4 months ago)

It was the original purpose of the bitcoin algorithm to limit spam.

If you have to do a lot of maths that takes your computer (for example) 30 seconds, that means it costs 30 seconds of compute to create an account. Nothing to an average user, for a spammer that wants thousands of accounts it gets expensive.

Several captcha[0] libraries already use this and it's great for accessibility (normal captchas are terrible for it)

[0] I know, it's not technically a captcha.

[-] shortwavesurfer@monero.town 15 points 4 months ago

Accessibility is very important to me as a blind user, and this helps tremendously.

load more comments (3 replies)
[-] BearOfaTime@lemm.ee 10 points 4 months ago

Oh, neat. I was unfamiliar with PoW. Thanks!

[-] pedroapero@lemmy.ml 5 points 4 months ago

Pow does not limit spam in bitcoin. Fees do. Pow is used as a decentralized election mecanism to distribute the block production.

load more comments (15 replies)
[-] shortwavesurfer@monero.town 13 points 4 months ago

For each account you register, you have to do 30 seconds worth of work. So to register one account, you do 30 seconds worth of work. To register 100 accounts, you do 100*30 or 3000 seconds (50 minutes) worth of work. Registering tens of thousands of accounts then becomes unfeasible.

load more comments (10 replies)
[-] mox@lemmy.sdf.org 15 points 4 months ago* (last edited 4 months ago)

A number is still needed to register I believe.

Indeed, which makes their headline a bit misleading. Giving Signal your phone number is not keeping it private.

[-] PersonalDevKit@aussie.zone 35 points 4 months ago

I thought peoples big problem with it was not wanting to give others their number to use signal? Like I meet Joe Blog online and don't want to give him my real number to chat.

Less people worried that signal had their number?

[-] fuzzzerd@programming.dev 17 points 4 months ago

Seems the second group is a vocal minority. This feature helps the first group, but doesn't help the second group.

According to Signal, the first group is the larger group and this helps the most users of Signal.

Could it be better? Sure. This is still a good step in terms of privacy, even though it doesn't really improve anonymity.

[-] InternetCitizen2@lemmy.world 8 points 4 months ago

Its important to not let perfect be the enemy of good.

[-] preasket@lemy.lol 6 points 4 months ago

Personally, I care about the phone number requirement not because I don't want to reveal it to Signal servers, but because it limits access to Signal for people in countries that block their SMS service - registration messages just don't arrive

load more comments (2 replies)
load more comments (4 replies)
[-] RayJW@sh.itjust.works 8 points 4 months ago

Wrong, it still keeps it private but not anonymous. It's not the same concept and for most thread models knowing that you use Signal is not really an issue, especially since with this feature no one can check if you have one if you don't give them your username unless they have access to Signal servers in which case they still have nothing except the knowledge that you have an account.

[-] 9tr6gyp3@lemmy.world 6 points 4 months ago

They do a lot of work to keep your phone number private, or at least any data that is tied to it. This username upgrade is solely for someone to communicate over Signal without needing to hand over your phone number.

For example, you can now be in group chats with internet strangers by just giving them your username.

On top of that, once MLS is adopted, you can communicate with other messengers as well.

load more comments (1 replies)
[-] arin@lemmy.world 12 points 4 months ago

Kinda stupid for privacy to hand over your phone number... Very counter intuitive

[-] Stewbs@lemmy.world 38 points 4 months ago

About time!! Been waiting for this for so long. This will definitely make the usability of Signal better and it'll also be more accessible to people who wanted a Telegram like way to talk to other folks. Requiring a number to still register isn't a bad thing in my eyes though sometimes it can be frustrating so I hope that there's an option to create an account without a number. Maybe the account will have finite time before it's auto-deleted if you don't input a number some time later to ensure that this option isn't abused to all hell by bots and malicious actors alike.

load more comments (3 replies)
[-] BentiGorlich@gehirneimer.de 36 points 4 months ago

I think its great. Its for people who simply don't want to share their phone number with other people which is a huge privacy concern, as you can find out a lot about a person by looking up info connected to their phone number.

[-] LWD@lemm.ee 31 points 4 months ago

Just yesterday, somebody commented that Signal might be adding the feature in a few weeks. I was incredulous, assuming it would be months.

Nope. As soon as I saw this, I went looking for an app update, installed it, and made a username.

[-] cosmic_skillet@lemmy.ml 26 points 4 months ago

To be fair, it has already been years

[-] Natanael@slrpnk.net 6 points 4 months ago

It has kinda been a meme that it's coming for years

load more comments (1 replies)
[-] FrankTheHealer@lemmy.world 15 points 4 months ago

Great news. Thank you Signal

[-] psychothumbs@lemmy.world 10 points 4 months ago

I'm still just so furious at Signal management for removing compatibility with other text apps. I used to be constantly growing my Signal network, now it's a slowly shrinking rump that I never add anyone to.

[-] FrankTheHealer@lemmy.world 21 points 4 months ago

Wasn't that compatibility based on SMS which is inherently insecure?

[-] UnsavoryMollusk@lemmy.world 10 points 4 months ago* (last edited 4 months ago)
load more comments (4 replies)
[-] bbbhltz@beehaw.org 9 points 4 months ago

Relevant info about the username/accountid implementation: https://fosstodon.org/@link2xt/111965597727225353

[-] preasket@lemy.lol 7 points 4 months ago

This is important context. Signal needs to make phone numbers optional...

load more comments (2 replies)
[-] brbposting@sh.itjust.works 6 points 4 months ago

Updated on iOS via US App Store - feature not available just yet. Looking forward to it in a few days perhaps!

[-] ResoluteCatnap@lemmy.ml 5 points 4 months ago* (last edited 4 months ago)

found this in the article

Right now, these options are in beta, and will be rolling out to everyone in the coming weeks.

load more comments (1 replies)
[-] moitoi@feddit.de 5 points 4 months ago

It was nice to use it in nightly. It's good it came to stable.

[-] kksgandhi@lemmy.ml 4 points 4 months ago

Great feature, but if I'm reading it correctly, you won't be able to chat with someone anonymously (because your profile will still be shared). Are there good apps for that?

[-] scoobford@lemmy.zip 6 points 4 months ago

SimpleX was the best for my purposes when I looked, but Briar is a compelling option as well.

The case can also be made for element, but it lacks forward secrecy and honestly the app kinda sucks.

load more comments (3 replies)
load more comments
view more: next ›
this post was submitted on 20 Feb 2024
641 points (99.2% liked)

Privacy

29784 readers
681 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS