SIGNAL APP NOW UPDATES ITSELF WITHOUT THE PLAY STORE, MAKING

File: 1487419512313.png (43KB, 1123x624px) Image search: [Google]

43KB, 1123x624px

Nice. Signal apparently works with microg google services framework too. https://microg.org/

Shame it's taking so long for Signal to get anywhere near the level of Wire.

Great now all we need is normies to actually install it

>>59175521
>ALL WE NEED NOW IS THE ABILITY TO REGISTER WITHOUT A PHONE NUMBER


Won't that disrupt how the encryption works?

>>59175747
Is there something bad about Wire?

Now I just need people to message.

He fell for the (((Signal))) meme.
lmaoing every laugh

>>59176133
I'll message you. Post your number.

>>59176097
Nothing bad about Wire. It's far superior to Signal and most alternatives I've found. It checks all the boxes for a Hangouts/SMS/FB/Telegram replacement. It would be nice if more apps followed their lead.

Friend recently told me to get Signal, blah blah Snowden recommends.

Download, no password protection? What the fuck? Not even setable by choice? I know my iphones hardware encyption is the best a phone can have but still, why not?

So my security relies on everyone else having a password protected phone? Ask friend if android password is mandatory due to security being piss poor. Oh no but we can set one...

Explain to me why this is memed or any better than wickr?

>>59176287
Wire has sketchy parent company that is planning on monetizing it. Also devs are ex-skype botnet programmers.

>>59176074
No, signal uses RSA for encryption. At the moment your public key is tied to your phone number on signals servers. It would be possible to tie it to something else instead, like a username.

Is there any app like this that doesn't need a phone number? Looking to get off the cell network here

>>59175521
seems you are a signal professional shill. let them know i don't use a cellphone, but i had an idea. when you open the application, for phones with the feature, use the fingerprint sensor to unblock the app itself.

i mean, you enter the application, then it waits till you authorize with your fingerprint. with phones with no fingerprint reader, it could be retina scan or face recognition, but it may be to far

>>59176074
Uh no

File: Screenshot_20170228-211634.png (81KB, 720x1280px) Image search: [Google]

81KB, 720x1280px

>>59176330
Are you being retarded on purpose?

>>59176347
Doesn't matter if they created Skype if the code is open source, which Wire is.

>>59176353
It won't be a username. It will be a random ID number like a slightly longer phone number.

File: IMG_7505.png (86KB, 750x1334px) Image search: [Google]

86KB, 750x1334px

>>59176635
Are you? Password protection isn't available on iOS.

>>59176399
Wire

>>59176675
Using iOS is like bending over to take it up the ass from anybody who wants to hurt you. You already lost.

>>59176675
but I thought iOS encryption was the best ever?

>>59176330
Use auto deleting messages

>>59176696
>>59176710

Name a phone with better proven hardware encryption, It's why I use one.

So because the developers don't include an obvious feature it's the users fault? Is this what we're saying?

>>59176675
>>iOS
>>worrying about security

>>59176749
The FBI didn't have any issues

>>59176810
An old 5C only exploit? Are you implying android is more secure right now?

An obvious as fuck security measure is missing that's all this comes down to.

File: Screenshot_20170301-004610.png (235KB, 1080x1920px) Image search: [Google]

235KB, 1080x1920px

>>59176682
???

What's the purpose of an IM if no one actually uses it?

Telegram masterrace here.

>>59175747

>Wire: centralized but secure service made by a corporation which is beholden to governments and law need for profit motives
>Signal: centralized but secure service made by a seafaring anti-goverment bro-tier hacker who does not have a profit motive and has a whole life philosophy revolving around telling governments and corporations to fuck themselves

Lolno

Are you that same guy who spends all day in the Tox groupchat just to tell people to get out and use Wire?

>>59176749
>hardware encryption

>>59176552
Using the fingerprint sensor to unlock the app already works on iOS; I wish it did on Android.

>>59176749
>>59176878
>>59176675
Oh my god, an actual Macfag on /g/ talking about how impenetrable Apple security is....I feel like Indiana Jones. I thought all you guys left like six years ago!

>>59177005
> (((seafaring anti-government bro-tier hacker)))
> (((who does not have a profit motive)))

Moxschlomo Marlinsfeld is his name.

>>59177047
What is enclave.

>>59177145
Wow legit argument again, iphone is the only apple product I use. Prove to me android is more secure, I'll wait.

And yet still no argument why Signal has no password protection?

>he wants a backdoor pushed without his knowledge
>he lets the OWS mitm him by serving fake keys during the key exchange
Just keep embracing the botnet you retards

>>59175521
>HOLY FUCK.
Why do Americans always say "holy [x]"?

Calm the fuck down, you massive hysterical retard.

>>59176947
Sign up on desktop and you get an email option.

>>59176959
Real men make other people join their IM services, not the other way around. Be a leader, not a follower.

>>59176287
What's wrong with Telegram?

The way I see it, acceptable messaging apps are
>Signal
>Telegram
>Conversations / ChatSecure / Gajim
>Wire
and probably others. No need to argue about which one's the best, just use them all and see which of your friends are on which one.

Also the XMPP ones are totally the best.

>>59177393
Nothing wrong with Telegram. If you desire to make it more difficult for (((them))) or want some semblance of privacy though then it's not your best option.

Have you tried Ring?

File: 1464492888417.jpg (25KB, 632x354px) Image search: [Google]

25KB, 632x354px

>>59177005
>shills in dudespeak
I thought Tox was shut down or something?

>no open source server software
>no server audits
>can't host your own signal server
XMPP is still /g/ approved. Signal shills need to get fucked.

>>59177507
Nope. [spoiler]How does one go about "shutting down" free software?[/spoiler]

>>59177520
It seems more rare these days to find someone on /g/ that actually runs their own server/services at home. Possibly due to the degradation of education. Many of them require a nanny (government) to tell them what to do. Sad.

>>59177520
>XMPP
Jabber is a shitshow, might as well run your IRCd and not deal with the overhead of an XML-based protocol.
Or just use some IRC network, your ERP will get lost among the tons there.

>>59176665
like..., your public key fingerprint (only sane choice)?

>>59175747
Don't shill wire, They didn't even acknowledged that wire wasn't working with microg faggot.

Some random user came with a patch after six months and wire has just started wrong with microg.

>>59177005
There are paid shills for Wire everywhere and I can't understand why.

>>59178865
Unpaid shill here.
The reason I recommend Wire is because it's just more functional than Signal (and Whatsapp and pretty much anything else) at this point.
If Signal had the same functionality and no phone requirement I'd shill for it all day.

what the hell is happening at OWS? did moxie get tired of sucking google cock? did they stop stroking his hair and calling him a good boy after he swallowed? or did moxie quit?

>>59178851
>victim of dyslexia

>>59178865
>I can't understand why people recommend a better app
This board is 18+

>current year
>Not using XMPP/Jabber with OTR

>>59178865
>There are paid shills for Wire everywhere

You people say this about every app.

Wire is still better

>>59175521
We also need server federation, don't forget that! Without that we're hopelessly dependent on the main servers and on trusting that they are indeed running unmodified builds of the published server source.

Oh, also, the RedPhone server code is still closed, no?

>>59178937
He's bowing to intense pressure from the public.

>>59175521
>WebRTC, OPUS video calling.
Too bad it's slowly dying of feature creep.

>>59177388

For some reason, this made me laugh really hard. That's some next level pretentiousness.

Anyways, I made my friends use Telegram instead of Whatsapp to group chat and stuff, so, that's something.

>>59175521
Does signal allow signing up without a phone # yet?

Does signal share your phone number with people you add?

>>59181178
>Does signal allow signing up without a phone # yet?
OP says no, dumbass.

>Does signal share your phone number with people you add?
It works like Whatsapp. If two people have each other's number in contacts, they become Signal friends.

>>59181200
I don't use whatsapp so i don't really know what you mean by that.

If i add someone not in my contacts to signal do they get my phone number or just a signal user name?

>>59181132
>I made my friends use Telegram instead of Whatsapp

>going from an app with decent encryption to a russian botnet

How is the signal desktop chrome webapp?

>>59181222
Again, you don't add people to Signal. Signal reads your contacts and if any of those people a) have you in their contacts too and b) have Signal, they automatically become your friend.

This is what Whatsapp and Telegram do as well.

>>59181320
It's sucks since like Whatsapp it's nothing more than a bridge to your phone. It's going to be phased out since Google is phasing out Chrome apps. They will have to do a standalone client or web app.

>>59181378
Hmm. If i can't add people without them being in my contacts that's kind of a deal breaker for privacy.

I have to say wire still wins hands down.

Let us self host then we'll talk

>>59181425
It's meant for people who are already friends but that may change in the future since many people are demanding that Signal can be used without a phone number. I expect them to add something similar to Ring ID numbers.

>>59181276

Botnet xD

>>59181494
I don't understand the concern over play services or where the server itself is hosted. If the encryption method used is as good as it should be then the server would never get anything but encrypted garble anyway.

>>59181589
metadata

signal for x86 when?

>>59181589

Full control of data

>>59175521
it's a pretty fucking shady service/program.

>>59181589
The only thing I wish they'd allow for is people being able to implement the tech over their own servers and use that if they wanted to.


I wouldn't use it but it would be nice.

How could Signal implement a system where they can:

a. allow for passwords instead of phone numbers to allow for true multi-device communication without relying on a phone.


b. still have a dictionary where the key is the phone number so you can find which of your friends/contacts are using signal


Also, if you switched to passwords instead of just using the numbers wouldn't backups of all your messages just be sitting there encrypted on a server somewhere? And tying the dictionary to your phone number allows for Signal to take care of all the user security. I just don't see how they can switch to a password system while maintaining the current functionality. Can someone give me their thoughts? I love signal and use it as more normal messaging application though.

>>59177269
He can't so he's just gonna keep memeing.

I like Signal, but the iOS version is sorely lacking. I managed to convert multiple friends who use Android to Signal partly because it didn't interfere with the communication of non-Signal users. IIRC, the iOS version only lets you communicate with contacts that also use Signal, which is retarded because most normies use iOS.

>>59183130
You mean you use Signal for signal encrypted chat and also as normal sms app?
So is it that apple doesn't allow iOS users to replace the sms app?

>>59176552
Biometrics are garbage and insecure.
Who's to say that the guy who wants access to your shit isn't just going to shove the phone in your face and have it unlock itself?

The courts protect passwords using the 5th Amendment. Your fingerprints aren't. You're required to divulge biometric data.

>>59184064
You are correct. Thanks Apple.

>>59176399
Matrix

>>59176749
>proven hardware encryption

relying on "secure" hardware is by far the stupidest thing I've ever heard.

what happens when your "secure" hardware has a fundamental flaw in the silicon?

you think Apple is going to recall every damn phone with the affected chips?

software security is significantly more valuable than depending on some retarded nonfree blobed negative ring hardware bullshit.

>>59181589
>I don't understand the concern over play services

maybe because play services is a highly integrated blob in Android that could potentially have memory access to all your apps?

>>59176003
That would be WhatsApp. At least that got normies to use fairly good crypto even if they don't give a shit.

>>59176074
No.

>>59176353
Incorrect: the Signal protocol does not use RSA. It uses Curve25519 for public key primitives, along with AES-256-CBC, HMAC-SHA256 and SHA256.

>>59176097
Still waiting for Wire to open the server source (they said they're going to do that Q1 2017). They fixed most of the bugs I reported. Still waiting on media to be e2e.

>>59176675
If you lock your phone with a passcode, iOS's encryption is superior to Android's. (I don't like Apple's control/walled garden approach to iOS, or the feel of it as an OS in general, but credit where credit is due: iOS's security while far from perfect is a lot better than Android's, which is a complete fucking trashfire oh my god you have no idea.)

>>59176810
They didn't actually ask the NSA, they wanted caselaw (and got BTFO). They couldn't even do NAND mirroring when it was explained to them, and contracted Cellebrite to do it for $$$$$$, who by the way also just got a 6/6s exploit for a cool million dollars via Zerodium.

>>59177393
Telegram is fucking garbage. Cleartext shit most of the time, shit when it does encrypt. Example: their response to the SHA-1 collision was to explain how it didn't affect them. (It does, in fact, affect them.)

>>59177520
Tried Matrix/riot.im?

>>59181132
You went the wrong way, you bloody idiot. Telegram group chats are completely cleartext. WhatsApp's are encrypted with best-of-breed e2e (Signal + Noise).

>>59181320
Shite. Needs replacing. Chrome apps are dead-end anyway. Replacement is under way.

>>59178937
Finished documenting the protocol.

>>59179966
The new WebRTC part replaces the RedPhone part for comms.

>>59181500
Have you used Ring? What do you think of it?

>>59184233
>The courts protect passwords using the 5th Amendment. Your fingerprints aren't. You're required to divulge biometric data.
The other think they're doing is building a profile of you now with your own biometrics. It's kind of fucked up but advertisers and corps will have your fingerprints maybe retina scans and general data associated with your metadata. Crazy shit.

>>59176749
>Name a phone with better proven hardware encryption
Any samsung with the latest KNOX security.

File: chatsec.png (110KB, 731x612px) Image search: [Google]

110KB, 731x612px

This is the only /g/ approved messenger.

I'll stick to XMPP+OMEMO until a decent matrix desktop client shows up.

>>59175521
All we need now is an official build on F-Droid.

>>59186356
>XMPP + OMEMO
Lmfao good luck convincing a normie to use that.

>>59175521
>WE ARE LITERALLY 2 STEPS FROM SIGNAL BECOMING THE MOST /G/ APPROVED IM SERVICE THAT HAS EVER EXISTED.
Not as long as xmpp exists to be desu senpai

>>59176133
This is the only real /g/ approved reply in this thread.

>>59175521
>signal
>not Tox
Casual.

>>59186896
>toxshit
you've lost the plot kid

>>59186024
>KNOX
>>59186024
>KNOX
Knox stores PIN in plain-text instead of salted hash or KDF, and "secures" processing it merely by obfuscated code.

>>59186767
Yeah seriously

>>59176097
UI was designed by a 14 year old girl who learned CSS in 8th grade.

>>59186862
It lacks being casual friendly. No point in something I can't get others to use.

I think Wire is looking the best

So it looks like Signal, Riot/Matrix, and Wire are the best choices for /g/.

Which will be our top choice?

>>59189638
Depends on what you want.
Signal use phone numbers and is meant to be a replacement for sms. For your mother. Nothing really more
Riot/Matrix - More complicated. For small businesses or teams is the target audience. Group chat is mostly focused on.
Wire - havn't tried

>>59190444
Literally the only person who I talk to through Signal end to end is my mother. Spot on.

>>59190444
It seems Signal will eventually have the same features as Matrix and Wire, though.

>>59190444
>Signal use phone numbers and is meant to be a replacement for sms. For your mother. Nothing really more

Moxie seems to be opening up to the idea of adding registration without a number so we may see Signal become an app for non-normies as well.

>>59188448
Maybe

How do we properly shill Wire so that everyone starts using it? It's clearly the best.

>>59192550
Make Wire threads.

>>59187375
No

>>59175521
The selfupdater patch hasn't made it on the playstore yet though, right?

>>59186767
I don't talk to normies outside of work. Why would I be worried about talking to them in any capacity. This is for talking with my friends who, like me, care about privacy and security. Shocker we have the same interests.

>>59189638
>Conversations with Self hosted XMPP
>Riot/Matrix
>Signal
>Wire

>>59194812
No

>>59194873
XMPP is the past. WhatsApp literally took XMPP, improved it into something better, and made it a billion user service. Something fossfags could never do.

File: 1487286940088.png (448KB, 465x431px) Image search: [Google]

448KB, 465x431px

>Chillaries trying be a whiney babster about their new Encrypted Super-Secured IM™
>me sitting here, eating riceballs
>mfw

XMPP is probably the closest you get to a secure protocol right now compared to those postdoves with birth defects and NSA inplants carrying enigma encryped shitposts.

I even convinced a normie to use XMPP like it was a piece of cake.
>>59195346
>closed source
>central server
>vague encryption
>tethered to phone number
>Terms of service/privacy
Man, I feel sorry for the people who use this.
It's not really my cup if tea either.
Otherwise, nice try, pal.

>>59195765
>XMPP is probably the closest you get to a secure protocol right now

Signal is more secure than XMPP+OTR. It just needs to have more options like not requiring your phone number but assigning you a number like Tox did.

File: 1486975769114.jpg (8KB, 248x250px) Image search: [Google]

8KB, 248x250px

>>59195853
I suppose you are partially right with that, but I like the possability of being able to host servers yourself. Signal requires a phone number. I still have my doubts about the storage of personal information on their servers.
>Tox
I don't like it client-wise, but it seems to have 'okay' specs when it comes to protocol.
Never really looked into it alot because the client wasn't compatable with my desktop and I thought it was unneccisairy.

Or better, try doing it person2person.

>>59176097
>>59175521
> Using signal or wire

Git gud get matrix.org what is this preschool? What is next you guys gonna shill ring? Matrix is a discord alternative,with no echo conference calls.I Can encrypt if you choose. You can cross talk with IRC,and freenet,and use bots,oh an run your own node.
>Giving away you phone number to ((signal))

This is some low energy /v/ tier shit

File: 1487005716429.png (27KB, 300x300px) Image search: [Google]

27KB, 300x300px

>>59195943
Ayy! My man.

>>59195932
Signal is getting closer to being fully open (the voice servers aren't open yet) and closer to being more distributed to self-hosted servers. We just need to keep pressing the devs and contributing pull requests.

Tox is probably as shitty as Telegram security-wise and without any of the polish.

>>59195976
Alright. I simply didn't care about Tox that much.

>>59195943
Matrix is still kinda beta and doesn't have a good native client yet. Once it actually goes stable and gets audited I'll consider using it.

Also its more of a Slack clone than a Discord clone.

>centralized walled-garden messenger developed by an unprofessional manchild that requires phone number for authentication
>/ourim/
I want neo-/g/ to leave

>>59196050
He said it's not /ourim/ yet you dumbass.

>>59181494
>let us federate
FTFY

>>59196133
I don't really give a shit about federation. I just want to use it without giving up my phone number.

>>59192550
You can't. Kikes have taken over.
I often get laughed at for using ProtonMail and not GMail/Hotmail/Yahoo.
Normies are stupid fucks.
Funniest part is when they need to cheat maths from me they can't because I don't use WhatsApp, and they won't install "some random 3rd party shit".

>>59196073
Moxie said he'll never support federation so it will never be ourim

>>59196497
Federation doesn't matter. Do you see XMPP replacing all other IM? No. You see walled gardens replacing all other IM. The goal should be to replace the evil, proprietary walled garden with a open source walled garden.

Every time you fuckers want to make your own clients instead of centralizing all your efforts into one open source client, the entire project goes down the toilet.

The best chance we have of having a good IM service is to stop being autistic and get behind one open source, secure IM service and make it really good.

Look at Matrix, they only have one good client and that's Riot. That's all anybody wants to use. There's no point in federating Matrix unless you want to spread it so thin that it doesn't get any clients off the ground.

>>59196556
>hurr durr the majority of people are idiots who don't know what's best for them so I must be retarded too and stop promoting free and open solutions

Fucking kill yourself, this is /g/ where we care about software freedom, not commercial viability

>>59196576
Software freedom doesn't matter if nobody uses your software, dumbass. You're wasting time making client after client after client instead of sticking to one thing and developing the client and server until they are great.

/g/ can't even agree on what is good for us and most of us are using botnet clients just to talk to people outside of /g/

If we all get behind Signal and make it what we want it to be, we will actually get something done instead of saying "hurr durr nothing is good we gotta make another thing!"

>>59196598
There already is a perfect solution. It's called XMPP+OMEMO. Decentralized Signal encryption on an established protocol. The people I talk to use it and as a basement dwelling autist I don't care for people other than other basement dwelling autists.

>>59197066
It lacks too many features to be useful. Signal is more robust and competitive. They've already got way more users than XMPP does.

>>59197066
>It's called XMPP

This is not 2004, dude. We've evolved past this.

>>59175521
>Signal commits a change to allow it to update itself without the need for the Google Play Store.
so it literally breaks the intended system, like a package on linux that updates itself around your package manager

this is a good thing?

>>59199577
It's good for getting around F-Droid which can't even keep VLC up to date.

>>59199577
signal has no dependencies that are not packaged with it, and there is no other application that depends on signal.
there is therefore no reason it shouldn't update itself (providing the user has the freedom to turn this off) because nothing could possibly break as a result.

>>59196304
>Kikes have taken over.

Fun fact: the creator of Signal is a Jew.

>>59176330
>
Android has it, get cucked Apple Pajeet

File: Zuckerberg-Jewish.jpg (26KB, 284x290px) Image search: [Google]

26KB, 284x290px

>>59185361
>WhatsApp's are encrypted with best-of-breed e2e
0.05 Shekels have been transfered to your account

>>59201408
Hehe stupid goy

>>59201204
There is a difference between kike and Jew. Same for black man and nigger.
Moxie is getting redpilled on FLOSS philosophy more and more.

>>59203941
>he thinks Jewish people are actually trying to help the goyim get their countries back

No, goy. Moxie created Signal to help degenerates and other Jew-lovers.

>>59175521
XMPP is /g/ preferred im protocol.
Now go fuck yourself moxie.
Best regards
/g/

>>59204009
I trust him because it was FLOSS before Snowden endorsed it, meaning it has more public pressure regarding security/privacy.

>>59204141
You trust Snowden? A known globalist whose job it was to create mistrust of the US so that the internet and other resources are taken away from US hands and given to a world governing power?

I mean the guy doesn't even support anything red-pilled other than not trusting intelligence services.

>>59204194
good thing this whole thread is about not trusting intelligence services.
we're not discussing snowden's favorite color, we're discussing ways to avoid intelligence services.
try to follow the logic brother

>>59204233
Why would you trust Snowden's endorsement when he doesn't even openly support what you actually believe in? If you asked him about anything red-pilled he would tell you that you are insane. He's clearly just an actor doing his job for globalism and the Jewish cabal.

>>59204288
he doesn't have to be my philosophy cheerleader.
he doesn't like government spying, neither do I.
we have common ground so I consider what he says on this matter.

obviously I wouldn't see snowden as an authority on border control issues because I may not agree with him there.

>>59199687
>>59199704
decentralization of purposefully centralized functionality though

I wouldn't want all my programs regulating their own updates from their own servers at their own times etc etc

>>59205729
No, not all of them, but in this case many people don't want to use Play services/google play store, and F-Droid can't keep shit up to date, and it's a serious security risk to have out-of-date crypto software.

What would you have done?

>>59205729
Then you have a choice, dude. Relax. Some people just don't want a play store and this is better for them.

>>59207684
That would be me. I run nextcloud and curate our own apps (8 mobile users). No google services or apps installed. Pretty much a botnet free life. We use wire for vidya calls and messaging or straight up sms atm.

>>59204045
Enjoy your DOA platform
Chat platform with no users = useless

>>59181405
Isn't the purpose of being a bridge that your messages aren't being cached on a server? If you could log in from multiple locations you'd have to backup your stuff.

>>59209434
What does that matter if its all encrypted?

>using this privacy hype exploiting semi-botnet product because i cant get people to use xmpp
Why is everyone saying this? I know it's pretty damn hard to get normies into using anything else than whatsapp but if you can make them download signal you can make the download conversations just as easily

If they switched to passwords and usernames every retard friend you have will be using weak passwards that will be discovered with a simple dictionary attack when the eventual hashes get out.

>>59209646
>if you can make them download signal you can make the download conversations just as easily

yeah until you tell them they need to make up a username at some shit they don't know about and set up the client correctly and that it doesn't have all the features that Whatsapp has.

Face it, Signal is actually doing for normies what XMPP could never do

There's a reason why Whatsapp literally took the XMPP code and built something more normie-friendly out of it for phones.

>>59175521
Does it still tell the users to fork over their real identity when using it?

Does it still store and transmit that identity unencrypted?

Is the developer still a flamboyant Jew with probable IC links?

Yes, yes and yes.

>>59209646
>you can make the download conversations just as easily

Downloading, yes. Setting it up, no.

You guys are living in a dreamworld. Nobody uses IM unless they have heard about it or it is extremely user friendly.

We are outliers who look weird for pushing these obscure services on them and then they find out they are the only ones using it.

>>59209702
>>59209754
>We are outliers who look weird for pushing these obscure services on them and then they find out they are the only ones using it.
You're absolutely right on that but conversations really reduced the difficulty of setting it up to almost zero. You just tell them "type in a funny username you like @ server you allready selected for them" and they're done. And it does have all the features whatsapp and signal have except the calling what people use rarely anyway. So i still dont really understand why it should be that much more difficult

>>59209943
My mom calls people on Whatsapp all the time. I don't know why you think nobody uses those features because they get around international calling very easily and some people also use it to get around limited minutes.

Every IM service should have voice calling today. Apple, Facebook, Google, everything has it and people want it.

>>59175521
>he doesn't already use Wire that you can sign to without a phone number and has a stand-alone desktop client

>>59210044
>has a stand-alone desktop client

too bad its a shitty electron app

>>59209977
I merely meant that people text most of the time. I only call people when we're at some place and trying to find each other or when there's something rly important going on and I just let them call me on whapp what they rather do anyway. it is indeed a serious disadvantage of xmpp though.

>>59210044
i'm still trying to find out if wire is a meme or not. There are a few people here shilling it so hard that i kinda get suspicious but it sounds nice on the other hand.

>>59210190
Everything gets promoted here. You can't be autistic and think everything is a paid shill or you'd never be able to use anything.

Are you going to stop using Intel and AMD processors because they both get shilled here?

>>59210253
>you can't be autistic
Yes i can. /g/ is one of the best places to be autistic on this planet.

All memeing aside, no need to be triggered. I dont really believe in payed shills on this board because it would be a waste to convince 300 people without any friends to use something. But when all posts on something are GO USE IT NOW COME ON ANON JUST USE IT i get the idea it might be just some placebo autists who are fangirling bout it all the time. Its just a feeling tho i haven't had the time to look into it yet

File: Ring_VOIP_logo.jpg (6KB, 200x68px) Image search: [Google]

6KB, 200x68px

>No centralized server
>Encription
>easy to use

Doesn't this solve most of the pleople here problem?

wikipedia.org/wiki/Ring_(software)

>>59210649
Is it open source and audited?

>>59210715
It was developed by savoir-faire a canadian (libre) Linux distro developer of course it's open source.audited ? no idea

>>59210715
he litterally gave you a wikipedia link lol
It is open source but still in beta.

>>59210649
>>59210715
>>59210778
>>59210801
Looks like a better version of Tox. It's GNU, too. This might be our official client when it goes stable but without features like group chat, I don't see it being popular on /g/

>>59210649
It doesn't work
I've been using it for months and messages get lost behind NAT and different setups

>>59213199
Ring is beta as fuck. It doesn't even look or feel like a beta. Seems more like an alpha. I would never trust it with anything. All of these secure IM apps have bugs but Ring is the buggiest.

Why nobody uses kontalk here?

>>59213311
Because Kontalk is shit and like 50 people in the whole world use it.

>>59210649
It doesn't work perfectly in the background. Even if Ring was working I wouldn't recieve phone calls.
If it worked better, with proper advertising I see it huge in normie culture (I'll give you a Ring).

>>59213854
I'll give you a Wire. :^)

>>59214992r
ew

>>59176097
Wire is superior to Signal. I much prefer Wire. It's performance and clarity is like none other.

>>59204288
>>59204194
Go back to to your countainment board

>>59216640
wake the fuck up

>>59219364
Open source enables criminals, nothing to hide and nothing to fear.

>>59175521
Still shittier than Telegram

>Trusting the Moxie Jewlinspike

>>59210715
Signal is neither fully open source nor audited.

>>59220364
Wire is. Except for the server.

>>59220458
>Except for the server
Case and point.
XMPP with OTR is the only viable solution for secure messaging.

I can't register because "register" button doesn't work. Too bad. Wire would be too much for normie friends though since registering via phone doesn't work.

>>59221031
Selfhosted XMPP + OMEMO-compatible clients are better. Check em > https://omemo.top

>>59175521
>LibreSignal already exists and is available on F-Droid provided you install the repo
>b-but this thing has finally entered the current year
Golly gee really makes me think

>>59176552
fingerprint sensors are easily thwarted, and do you really want your biometric info tied to your messages?

>>59219482
Telegram isn't even secure...

>>59221031
>XMPP with OTR is the only viable solution for secure messaging.

OMEMO has replaced OTR, grandpa.

>>59222054
It works fine for me.

>>59224726
this is a fucking meme I'm tired of
telegram (even without secret chats) is encrypted.
literally nobody can see it
fucking isis uses telegram

>>59225878
Everybody in the security community says it is not really secure, dumbass.

>>59226416
only people on /g/
people on leddit
and people with other products to shill

in other words, people who don't know anything.
also, the only complain people have is that they "rolled their own encryption", not that the encryption is bad in any way. If they'd have found something wrong, they'd have claimed the bounty Telegram has had on since its inception.

>>59226499
No, seriously. The entire security community says its not safe to use. You're being retarded.

>>59226499
>If they'd have found something wrong, they'd have claimed the bounty Telegram has had on since its inception.

Rigged

http://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest

>>59176810
>had to pay a million dollars to unlock a single iPhone, one without touchID

Is that supposed to be bad, anon?

>>59226778
yes

Decentralized < Distributed

>>59228411
>Decentralized

Enjoy your dead battery

>>59225878
>>59226499
you are really poorly informed, anon

>>59210778
>canadian

dropped

>literally nobody I know uses signal

Zero squared is zero.

Also WhatsApp encrypts messages in the same way Signal does. Law enforcement can just break into your physical phone.

>>59221031
It's called "case in point" I think.

>>59232597
>Law enforcement can just break into your physical phone.

They can try...

>>59232597
Closed source and owned by botnet company.
I only use it because my stupid friends use it.

>>59234723
Haha you dumb follower

Can Signal be used as the SMS app on iOS? Or will I be forced to use Messages alongside it?

>>59234491
Whether they get in or not is just a function of how important the issue is to them. You do realize that, don't you? Even fancy ass "secure enclave" storage for encryption keys can be defeated with enough resources.

>>59234723
So what if it's closed source kid? The messages are fucking encrypted. Nobody's reading them. People have tried.

>>59235367
Doubt it. If you're using SMS at all you've already lost.

>>59235367
Apple blocks all apps from sending SMS except their own.

File: maxresdefault-3.jpg (46KB, 1280x720px) Image search: [Google]

46KB, 1280x720px

>>59176720
>auto deleting messages
He thinks auto-deleting messages auto-delete!

>>59175521
While Signal is great, their inability to comment on whether Signal uses Amazon's AWS (Signal had a lot of issues with transmitting files during the recent short AWS outage) is really making me doubt their security and privacy spin.
So as always: tread carefully.

>>59175521
I understand why Moxie shakes his head all the time at everybody pestering him to remove phone numbers.

The app and server is entirely open source. You can simply remove the phone number ID and replace it with alpha numeric usernames instead. In fact, that's exactly what Wire did but they unfortunately rewrote a lot of internal Signal functions so much it no longer resembles the same software and is questionable at best for security

>>59241110
Doesn't the phone number allow you to find contacts easier when it's a key in the database?

File: tox.jpg (14KB, 300x300px) Image search: [Google]

14KB, 300x300px

signal isn't representative of /g/ quality software

/ourim/ is tox

>>59241110
>In fact, that's exactly what Wire did but they unfortunately rewrote a lot of internal Signal functions so much it no longer resembles the same software and is questionable at best for security
i didn't know wire was based on signal and they rewrote a lot of things, any links with more info on this? also they had an audit last month.

>>59241321
Moxie posts this on HN all the time
https://news.ycombinator.com/item?id=12149642

Wire rolled a protocol similar to Signal, basically they just rewrote what Signal did but with zero idea what they're doing. Then to silence the fact that Moxie was pointing out what a bag of shit their security was, Wire came up with that lawsuit that claimed Moxie was "extorting them for copyright" which never happened.

Wire is entirely shady avoid at all costs. You can simply rip out the phone number and SMS verification from open source Signal server and run your own private Signal server over Tor if you wanted, or better use CoyIM w/OTR which has been around forever https://coy.im/

It says alpha software, but the people who built that are security professionals in le hacking scene and well known, producing an easy to verify codebase whereas pidgin IM is a pile of spaghetti code and their OTR support should be considered alpha too but of course isn't.

>>59241161
You can also write your own app from scratch, and just use the Signal java library. It will easily encrypt/send/authenticate messages with a clean API you can use.

That's what Tox.im is, using djb NaCl (libsodium) to encrypt and auth the messages then their own software for identities ect.

>>59241165
>tox

it's shit and gives out your IP

>>59226499
This anon gets it.

>hurr durr they don't use the encryption I want

You may wonder why the ((("entire security community"))) shills without actually proving anything.

File: 1469766327173.png (87KB, 575x575px) Image search: [Google]

87KB, 575x575px

>>59242203
Reminder.

>>59241435
fuck, and i thought wire was ideal as a skype replacement for me and my friends, i'd try CoyIM but we use certain things like video calls and other things found in skype and wire, i suppose i'll look into matrix/riot, will definitely check CoyIM with someone else though, thanks for the recommendation.

>>59242629

troll

>>59241435
>better use CoyIM

More like Goy IM

ok, i fell for the meme today
installed from the fdroid unofficial repo
libresignal or something like that

tons of privacy options, really clean interface
BUT
i had to use my phone number to register: now i have niggers and thots messaging me like 'hey what up anon'
and I don't even know who they are because i have my addressbook clean as always

that shit is trash
i want to message who i add
i want to get messaged by who i want
i don't like this 'if someone has your number, you appear on their list, and even get notified about it'

that is a Jew Zuckerberg tactic

no no no

>>59244620
(cont)
also, the permissions list IS BEYOND RIDICULOUS

on a side note:
my phone is google-free
and i have microg installed
i didn't even have to configure anything... push works

>>59244620
>>59244641
here are the permissions list:

https://support.whispersystems.org/hc/en-us/articles/212535858-What-are-all-these-permissions-

it is pretty overkill IMO

>>59242685
Wire is still ideal though. How does a little drama change their audit and maturity at this time?

>>59175521
I've been using LibreSignal for awhile which already has the ability to work without google play services.

>ALL WE NEED NOW IS THE ABILITY TO REGISTER WITHOUT A PHONE NUMBER
This will never happen. This is how it knows who is or is not using Signal. Otherwise it would have no idea when to encrypt messages.

>>59245773
What's the difference between Libre and ordinary?

>>59245889
Probably nothing significant now that Signal dev finally accepted the patches that were inspired by LibreSignal project. Although LibreSignal is technically dead and has to be built yourself. Signal dev went full apeshit about LibreSignal because it still communicates with the same servers.

>>59245889
>What's the difference between Libre and ordinary?

What are you even doing on /g/?

>>59246039
Considering ordinary Signal is also libre, you 'tard.

>>59246307
It's not libre if it solely uses a proprietary way to connect to other users, dumbass.

>5 (FIVE) day old thread
k /prog/

>>59246781
we did it!

Matrix is pretty good, but Olm needs longer in the oven. OMEMO is good. Signal is good.

>>59225878
This was not a meme. This happened to be actual fucking information that you didn't listen to. Telegram does not have secure end-to-end encryption. MTProto is embarrassingly bad.

As for your last point, "known for being a terrorist hangout" isn't actually a positive point, you doofus. Daesh used (unencrypted) group chats to broadcast their ideology (and then got banned by Telegram, because Telegram can read groups BECAUSE THEY ARE NOT E2E) but don't use it operationally at all.

>>59226499
They use SHA-1, IGE mode (?!?), and RSA, you idiot. It's like they picked up Applied Cryptography, smoked crack, and coded up something half-baked. I tried to tell them of several flaws: they didn't listen and actively tried to tell me why I was wrong. They are not cryptographers; they are, at best, self-important math PhDs with an army of blind paid shills and no cryptographic experience whatsoever who did not know who Daniel Bleichenbacher even is, which is kind of a fucking problem when you're using RSA.

The setting for the bounty is not the realistic setting that, say, allow .fr ANSSI to crack it.

At worst, Telegram could be obfuscatorily, deliberately lousy on purpose. I have seen the code. I honestly cannot rule that out. WhatsApp does better, for fuck's sake. Even Tox does better.

>>59234723
Some of us can analysed closed-source software. Last I checked, WhatsApp was legit and secure. Turn on the notification about new keys, and be aware if someone changes phone a half-sent one-tick message can be redirected (a reliability/security decision), but only once. Pity about its owners, but if Facebook already have your phone number because your friends have you in their contact list and the Facebook app on their phones, you might as fucking well use it.

>>59235367
No. Only Apple get to do SMS on iOS. That is why Moxie had to remove encrypted SMS from TextSecure to make Signal.

File: 1457739056652-g.jpg (121KB, 2032x820px) Image search: [Google]

121KB, 2032x820px

>>59175521
>XMPP+OMEOM already does all of this (including the exact same encryption) but without the phone number, with federation (+linux clien) and a dev that's not a childish asshole

Why do you people insist on using a normie IM?

>>59247929
Because nobody uses your AutismIM

File: discord.png (17KB, 484x256px) Image search: [Google]

17KB, 484x256px

lol watch this lads

>>59248435
>botnet

ok

File: Screenshot_2017-02-17-06-51-07-778_com.twitter.android.png (939KB, 1080x1920px) Image search: [Google]

939KB, 1080x1920px

>>59249433
Signal users

>>59248288
Regular people use Whatsapp. It's now that we can either buy into the next big app™ walled garden thing or promote open protocols where the usage is literally as simple as creating a Facebook account (actually even simpler).

>>59251831
You can't undo WhatsApp.
People will still use it because of old geezers they are in contact with.
Same case as for Viber.

>>59251923
Then why are people recommending Signal? It's another shitty walled garden with almost the same crypto as Signal.

>>59251955
It's desperate cry for our long lost freedom.

File: 1476801034586.png (178KB, 288x415px) Image search: [Google]

178KB, 288x415px

>>59252010
>freedom
>in another closed system where the app controls you instead you the app
The only difference between Whatsapp and Signal is that Whatsapp is run by a large corporation with questionable ethics, whereas Signal is run by an unprofessional manchild who throws a temper-tantrum when things don't go his way.

>>59175521
I don't use signal but those are fairly big updates.

It is nice to see a company committed to listening to the big user complaints and actively commit to fixing them.

>>59252052
I used Signal as an example. There are other alternatives.

>>59252410
This thread is about Signal. That's what I was referring to.

Are there any news when they are going to offer Signal not from the play store?

File: Flash_Copperhead.jpg (448KB, 1920x1440px) Image search: [Google]

448KB, 1920x1440px

>>59252475
You can use noise from the F-Droid Copperhead repository until they set up a broadcast channel.

Wouldn't you rather like that Bleep went open source?

what memes can whatsapp get from me if the messages are e2e encrypted? what is /g/ so afraid of, or is it just a matter of principle?

>>59255321
>He believes a closed source app is actually e2e

Kek

>>59255321
1) Metadata can get people killed.
2) Owned by the biggest spy organization.
3) Facebook makes money by recording everything you do, so encrypting your texts goes against their interests.

It would be cool to make a mesh network with the Signal protocol.

>>59177393
>>59177476
Russian gov is spying on Telegram. AVOID

>>59175521
>ALL WE NEED NOW IS THE ABILITY TO REGISTER WITHOUT A PHONE NUMBER AND CREATE A STANDALONE DESKTOP CLIENT.
The day this is implemented is the day this thing loses any remote chance of public viability

>>59176097
>Is there something bad about Wire?
honestly itsuser interface doesn't come close to Telegram

and it doesn't have stickers

that's why my brother and parents don't use wire over telegram

>>59181568
https://www.documentcloud.org/documents/3259984-Trump-Intelligence-Allegations.html

Note the part about Telegram. Your trust is misplaced.

>>59175521
Friendly reminder to use Wire or Riot instead of Signal. Wire is the go to go gen purpose messaging app (has implemented the axolotl protocol with Rust and Haskell without the need for google cloud messaging which means trully multiplatform floss protocol) it also has nice features (gifs, voice effects for your voice messages, video/voice group calls, oembed, @usernames, lets you send drawings in mobile apps, "msn nudges" are back called pings). Riot is for your enterprisey needs (it is what sñSlack should've become, but didn't, otr, floss, decentralised and interoperable with xmpp or irc)

>>59184233
>>59224406
>>59186012
oh look it's /g/ being clueless conspiratards again

>>59257045
Can any of the solutions you recommended communicate over SMS?

>>59252157
>It is nice to see a company committed to listening to the big user complaints and actively commit to fixing them.
It's mostly a single dev and he isn't really commited to listening to complaints or fixing these issues. He just got sick of people bitching. If you look at his posts on Github you'd see he got into a massive shitstorm with the original devs who removed the google dependencies because he literally did not give a fuck about the edge case users who refuse to install google dependencies.

Centralised trash. Just use IRC/Jabber.

>>59257045
What does Wire get from this? All this work for nothing?

>>59257541
sms is obsolete. no one can build a service on top of it.

If you have an android phone you could replace your default sms messenger with silence.im and ask your friend to do the same.

File: 1463753085575.jpg (58KB, 1280x720px) Image search: [Google]

58KB, 1280x720px

>>59257098
>i'm only pretending to be retarded
Secret courts (FISA) and actual ministries of truth in most western nations. If you hurry you might be able to claim being new to the world. This is an 18+ board though so you need to leave.

>>59257981
if you're worried about being spied on you have more things to worry about than your fingerprint

>>59257708
I'm sure my friends will get right on that.

>>59256575
>mesh network

enjoy your dead battery

>>59257850
>What does Wire get from this? All this work for nothing?

Same shit as Telegram. They make it free to build the userbase and then add paid features later.

>>59257850
they said they were going to do something like discord, paid features. I suppose that's going to happen after they open source their servers.

>>59258095
The point is to make things more difficult and to build good security habits. It's up to you to figure out the perfect curve to meet your needs.

>>59175521
Can we ban the signal shill?

Riot is better

>>59258575
Fuck off, Riot shill. Your shit isn't even stable or audited. Let's ban you.

>>59258597
>posting every day about signal this signal that
> there are already better communication solutions that were open source from the beginning,and do not need to have a list of people phone numbers

Signal is great guy,use it look how they stopped using a proprietary middleman server

>>59258624
technically it might be better but signal wins in usability like whatsapp, google, and facebook

>muh tox
>muh signal
what's with these neckbeard chatfags. go shill your shit somewhere else

>>59258624
Signal is proven to work. Matrix isn't even stable yet. You lose, Matrix/Riot shill. Just give up.

>>59246781
bring back /prog/!

>>59260642
no

>>59228025
How?

Thy have to pay out the ass just to access that information

>>59257850
>If you have an android phone you could replace your default sms messenger with silence.im and ask your friend to do the same.
Does it have forward secrecy? How are keys exchanged?

>>59257850
>If you have an android phone you could replace your default sms messenger with silence.im and ask your friend to do the same.

this is even less likely than getting people to use Signal.

just stop

>>59264533
His answer to the one he responded to was correct though, retard.

>>59264823
And that matters how?

>>59256833

Oh well. At least has more features than Whatsapp and I don't use it for anything really important I guess...

>>59177388
Could you share some of your real men tactics? Because I sure as fuck don't know how to get anyone except close friends and family to use it.

>>59257098
I bet you think the FBI planting drugs and child porn on those they don't like is just a conspiracy.

>>59262763
Silence is a Signal (aka Textsecure) fork.

It emerged back when Signal decided to drop the encrypted SMS feature because of metadata concerns.

>>59185361
>The new WebRTC part replaces the RedPhone part for comms.
So their server is no longer involved at all? Can you confirm that with a link or something?