Andromxda 🇺🇦🇵🇸🇹🇼 @ Andromxda @lemmy.dbzer0.com

Mastodon: @Andromxda@infosec.exchange

---

Read more

Posts

50

Comments

1,789

Joined

1 yr. ago

Moderating

---

I tried it over and over, found the UI and UX to be pretty poor, and the app is pretty buggy. It had an issue for months that caused comments to sometimes be posted twice or more, it was incredibly annoying.

They should really use SecureDrop

Bad choice, many new users specifically came here because of !piracy@lemmy.dbzer0.com, which can't be accessed from lemmy.world.

Never tried Raccoon, but I used Connect for a while, it's not bad, but unfortunately proprietary :(

It's unfortunately proprietary :(

Or does it just bother you to know, in the back of your mind, that it is not native?

That's why I said that this is stupid and petty, but the thought alone makes my blood boil. And it's not the same as with normal Electron apps on desktop, I also hate those, but for different reasons. Voyager looks just like a native iOS app, which makes this even worse for me, as I'm allergic to this kind of HTML/CSS/JS imitation of native UI libraries. Something about it just feels so wrong to me as a developer, I don't know.

But I recommend you don't actually listen to me, just use whatever you like.

You can also get it from the Play Store, or directly from GitHub via Obtainium

I know that this is stupid and petty, but I dislike Voyager, because it's essentially a web app. I prefer native or near-native apps (things like Flutter or React Native). I tried it out and it's pretty nice UI/UX-wise, but I still prefer Arctic on iOS, because it's an actual native app written in SwiftUI, and thus closer to Apollo for Reddit (which Voyager tries to imitate).

IP Webcam (unfortunately not open source)

Works fine for me on GrapheneOS, it's been there since the 2024123000 build.

The only good apps are Thunder on Android and Arctic on iOS, change my mind

Edit: Eternity is pretty great as well, I used to use Infinity on Android back in the Reddit days

There was a period where they didn't push changes to the repo, but all the code was released afterwards and it's been getting regular updates ever since. But it also doesn't matter at all, since the Signal client is designed in a way that avoids putting trust in the server. Signal servers could literally be run by the NSA and it wouldn't matter, as everything is fully end-to-end encrypted, including metadata. The Signal protocol was also updated to use post-quantum cryptography in 2023.

below a large bold warning that discourages people from actually using it

Yeah, because an APK downloaded from the web isn't automatically verified. You need to perform the verification of the package manually, which most users probably won't do. So it's safer to download a build from the Play Store, which does this automatically in the background.

Signal’s default, well-supported installations use Google services

Signal only uses FCM for notifications, with a fallback mechanism (WebSockets) being available in all builds of the app, as well as Google Maps for location sharing (which most people probably don't use anyway).

so unless you’re an extremely atypical user, those services are present on most of your contacts’ devices

Google Play services being present on people's devices has nothing to do with Signal including the library. They are present on almost every Android device, because Google pressures OEMs to include them and grant them system level privileges.

Let’s also remember that E2EE doesn’t protect the endpionts

Yeah, but that's the case with EVERY messenger app, so I really don't know what your point is here?

As far as I know moxie, signals lead dev, considers only the use of the officially build and distributed client authorized to use their servers.

Moxie has resigned a few years ago. The article you linked to is 9 years old, Signal leadership has changed a bunch of times since. Signal can't detect that you're running an alternative client, because that check would require them to include some new code in the official client. Even if they did this, they couldn't just ban anyone who's client doesn't pass the check, since it could just be an older version of the official client. They could force everyone to use the official app, but they really have no reason to invest time and effort into enforcing this. Molly is only available for Android, and it isn't even on the Play Store or the official F-Droid repo, so the user base naturally won't be as big.

You don't even need to piss on it, a splash of water is enough for the cybertruck

Actually, the fascist dictator is the one who sucks the billionaires' cocks

sudo finger

These aren't actual Spotify downloaders:

spotDL finds songs from Spotify playlists on YouTube and downloads them

Source: https://github.com/spotDL/spotify-downloader/blob/master/README.md

No it's not: https://github.com/signalapp/signal-server