Yog-Sothoth @ Supernova1051 @sh.itjust.works

Posts

0

Comments

64

Joined

2 yr. ago

Signal is a publicly available app that provides encrypted communications, but it can be hacked.

This is misleading statement that will only confuse people who want to use a secure messenger.

To clear things up with anyone who's not technically inclined: Anything can be theoretically hacked. Signal has not been hacked and has no history of being compromised.

The Signal "hacks" that linked people's Signal client to devices that aren't theirs were sophisticated phishing/spoofing attacks. The equivalent of getting someone to click a malicious link via email because it looked like the real thing.

A reminder that you still need to do your due diligence even when using a secure service. Technology alone cannot completely protect you.

H.265 is patent encumbered. Blame the 2 or 3(?) patent pool holders (for-profit corporations, unlike non-profit -and-slowly-losing-market-share Mozilla) for not making it free to use for everyone.

This is why AV1 is preferred, it saves bandwidth and there's no threat of being sued into oblivion.

But then you're indirectly giving the enemy (Google) power by increasing their browser market share, which in turn lets them dictate the future of the web.

Tesla facilities face wave of attacks as Elon Musk delves into politics

I love good news!

just tell people to join mastodon.social. problem solved

Which is a great workaround but then all your private notes are on Google's servers, accessible to anyone with enough admin rights on their end. All apps should be end-to-end encrypted going into 2025. There's no reason security AND privacy shouldn't be included.

I've never seen constant login reminders, but I've only used it in a browser, and the Android/Window/Linux apps are you seeing it on iOS? Maybe its a bug? If you go to settings in the app and then click "Help and support" > "Report an issue" you can open a github issue. I've had really good success in getting issues resolved.

technically yes. they just recently made the sync server open source - https://github.com/streetwriters/notesnook-sync-server - but their documentation for it is still pending.

I've been following their progress for a while and can say that they appear to be following through on all their goals. and are very responsive to issues on GitHub. but don't take my word for it, check out their roadmap to see when they release the self hosting documentation- https://notesnook.com/roadmap/

did you vote? because a lot of people didn't even do that.

I couldn't get work to pay for it so I found a better, cheaper alternative, Notesnook. It's open source (client and sync server), you can publish notes, and it's end-to-end encrypted.

https://cryptpad.fr/ as an alternative to Googles online office suite.

end-to-end encrypted and open-source collaboration suite.

still really early in development but if you primarily work from the browser on a desktop/laptop, it works well enough. I've struggled with getting sheets working on a mobile browser but I really like that you could completely self host if you want or just pay them to do it for you.

Reddit/Twitter have had years of development and tons of funding. you're comparing Applesnto oranges. give the little guys (Lemmy/Mastodon) some time to catch up? that they already work as well as they do compared to massive corporations is pretty impressive. And just to counter your experience, I've had zero issues with Mastodon. Lemmy has a few minor UX bugs that will eventually get ironed out.

alien invader

Last I checked Threema was at least just as good as Signal. Unfortunately Threema is a paid app, which makes it really difficult to for me to recommend as there are many opposed to paying for apps for various reasons. I stick with Signal and even being free (I do donate monthly) I've struggled to get people to switch. I find Signals approach of being donation funded to be more equitable and accessible.

loops is still very early in development. people need to tamper their expectations.

deals with Microsoft or any other competitor who may want to silence alternatives.

XMPP only does message encryption. Signal has spent tons of engineering time and effort to minimize the collection of metadata, not just encryption of message content.

Privacy and security is all about threat modeling. Signal meets 100% of the security needs of everyone I communicate with in my region of the world. There's no need (especially now that you can hide phone numbers) for the added security benefits of SimpleX.

Additionally, my experience in using SimpleX over the last year+ is that message delivery is not reliable yet. This has forced me and the few people I've been testing it with to fall back to Signal multiple times. Because of these reliability issues and lacking UX, I don't feel comfortable pushing it on others, knowing the tolerance level is low for message delivery failures and UX that isn't yet up to par with other messaging apps.