Why Signal is garbage and /g/ should not recommend it any longer

Use Silence (Send encrypted text messages (SMS/MMS)) - https://f-droid.org/app/org.smssecure.smssecure instead

>>58893614
even worse

>>58893584
>>depends on Google Cloud Messaging to send messages from Android, which is shit.
There is literally nothing wrong with Google Cloud Messaging.
>>author uses a pseudonym instead of his real name.
As anyone on the Internet should do.

>>58893584
Use a fucking fork if the google services thing bugs your autism.

>>58893741
all of its forks are shit

>>58893756
Well I guess nothing will satisfy your autistic lust then. You should just kill yourself then.

>>58893584
You can use microg instead of gapps. Works for Signal without any fuss.

When wire releases their server code it will be the /g/ choice.

>only available on Google Play or Apple store.
You could download the source from Github, compile it, drag and drop the .apk onto the phone, and install it manually.

>author uses a pseudonym instead of his real name.
Why should the author post under his real name? We all trust Floens not to spy on us with Clover, and he's clearly not using his real name.

set up your own xmpp server or create an account on an existing one (registrations differ from server to server so you will need to look for the ones that only require a username and password). if you set up your own server, use prosody because its very easy and quick to configure. use conversations im or xabber as a client. jingle lets you have voip over xmpp, only conversations im supports that. you could also host a mumble server too (use umurmur, its very lightweight and really fast to configure compared to murmur) and you can use plumble as a client for that. all of the clients i mentioned are on fdroid, prosody is open source as well.

>>58893972
id also like to note that umurmur requires only two small dependencies and does not need qt

>>58893972
>>58894017
this is why /g/ is doomed to fail

>>58894037
i dont get it

wait....signal uses google play services?

what the fuck is the point of it then? It's compromised by design

I just use kontalk myself
It's not great but it works with the one person I use it with

>>58894083
>signal uses google play services?

How can you not know this?

>>58894083
are you all fucking stupid? It uses GCM to tell you have a message to be fetched, GCM knows absolutely nothing about whom, what, or anything of your conversation. it's simple a battery-effective method of fetch.

>>58894037
> /g/ is doomed to fail
>implying it hasn't already happened.

>>58894224
some people dont want that, for good or for bad reasons, it isnt your business to know why and it isnt your choice to make. so fuck off

>>58894310
then gut the functionality and compile yourself you fucking turboautist.

>>58894398
i have but that wasnt the point

https://sandervenema.ch/2016/11/why-i-wont-recommend-signal-anymore/
https://sandervenema.ch/2016/11/why-i-wont-recommend-signal-anymore/
https://sandervenema.ch/2016/11/why-i-wont-recommend-signal-anymore/

File: 3-fdroid-copperhead-repository.png (22KB, 558x818px) Image search: [Google]

22KB, 558x818px

>>58893584
You can use Noise a Signal compatible fork without Botnet dependencies
>https://copperhead.co/android/docs/usage_guide
>Noise, a fork of Signal without the hard dependency on Google Cloud Messaging is available in the Copperhead F-Droid repository. It’s recommended to prefer other messengers until support for running without GCM lands upstream in Signal, but an option is available if you really need to be able to communicate with Signal contacts. It lacks support for voice calls and isn’t optimized for low impact on battery life like Conversations.
>https://encrypt-the-planet.com/noise-a-signal-messenger-fork/
>pic related
>made by Copperhead, the guys backing the Tor secure and private smartphone mission https://github.com/mikeperry-tor/mission-improbable/

And you can also use Silence a TextSecure (Signal IM) fork without Botnet dependencies
>https://silence.im/
>SMS/MMS encryption made easy
>A fork of Signal (TextSecure) with SMS encryption made by a reddit user at FOSSdroid

>>58894833
Neither of these solve the problems in the OP except for the Google Play thing.

use OTR
use riot/matrix

>>58895383
>riot/matrix

Still has some of the problems that Signal has.

Doesn't even have a standalone client.

use only xmpp or matrix on decentralized or home servers and interface using floss clients.

>>58895394
Matrix/riot.im has a desktop client. Using it with a self hosted server right now.

>>58895432
It's a webclient. Boring.

>>58895462
Windows client works well enough for me. Video calls work well too.

>>58895722
Which one?

>>58895814
Riot.im

>>58893584
The fact that it requires a phone/phone number is bad enough for me.

No one recommend a it unless they are a retard.

>>58894083
>>58893810
>Still goes through a middle man server of proprietary nature

>>58895383
>>58895432
>>58895722
>>58895865
>not audited
>not even considered stable yet

no way

>>58895409
>use only xmpp or matrix

both are not ready for primetime.

kontalk + omemo is the only choice

Just use wire , it got security independent audit and it is ok.

>>58895886
Every transmission you make crosses lines that can be man in the middled

That's why you're encrypting it in the first place isn't it?

>>58896902
hmmm

>>58893584
I'm currently making a fork of LibreSignal with my own server.

>phone number
That is disappointing: can't use it with a tablet. Normies don't like logins: this is what made WhatsApp popular. Signal is designed to be something anyone can use. It is not an ideal choice and I don't like it (especially with SS7 problems). You may see a change in this soon...

>contacts
Scalable contact discovery from your existing address book without uploading is a Hard Problem. There are experiments with more efficient private set intersection algorithms, but they are not ready yet. They really don't keep logs of anything but registered numbers.

>store
Secure software needs to be kept up to date to fix security vulns. At the time of publishing TextSecure, F-Droid couldn't secure their way out of a paper bag and there was no way to publish on it via signing things with your own private key.

>Play services/GCM
GCM is the only thing on Android that is allowed to wakelock you when in Doze mode (Marshmallow and up). Unless you want to miss texts, you need to use it - so Signal does. Yes it is horrible that you are required to use a proprietary Google subsystem for Android just to be able to ensure reliable message delivery. Users don't even know how to find the exception.

>standalone desktop
Extremely legit point: Chrome apps are end-of-life. Watch this space.

>sound quality
Newest beta https://play.google.com/apps/testing/org.thoughtcrime.securesms uses WebRTC, sound quality = Opus.

>file
Not sure what you mean here.

>faggy UI colors
Explain.

>pseudonym
So what? So did Satoshi, and people wank over Bitcoin.

>>58893765
what if he just used one of the millions of alternative ways to communicate over the internet securely? seems like a better solution than suicide, imhofam