535
Signal Is More Than Encrypted Messaging. Under Meredith Whittaker, It’s Out to Prove Surveillance Capitalism Wrong (www.wired.com)
submitted 2 years ago by to c/privacy@lemmy.ml
257 comments fedilink hide all child comments
 

https://ghostarchive.org/archive/0QgXq

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 2 years ago (8 children)

He was specifically talking to that developer. The "You" and "You're" in that quote was specifically targeted at the LibreSignal developer.

I recall the gurk-rs developer specifically mentioned that his client reports to Signal's servers as a non-official app. The Signal admins can see the client name and version - just like websites can tell what browser you're using - and could easily block third party clients if they wanted to but they don't.

If Signal wanted to block third party clients, they would have blocked them already.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 3 points 2 years ago (7 children)

    Moxie made it incredibly clear, he does not want third party is talking to the signal servers.

    Libra signal took him at his word and turn themselves off

    The other developers, like Molly, take a stronger road.

    Is signal currently banning third party clients? No. But they've made it clear they don't like them. They didn't actually ban Libra signal, they just asked them to stop. Could they ban the clients in the future? Yes

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 4 points 2 years ago (4 children)

    I'll reiterate my statement as you didn't address it.

    If Signal wanted to block third party clients, they would have blocked them already.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 2 years ago (3 children)

    I respectfully disagree. They could be waiting until it becomes a big issue. Right now that would just cost them good PR, but if somebody was using the signal network and their client became very popular they absolutely have expressed the desire, intent, and as you indicated the capability to do so.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 2 years ago (2 children)

    They could be waiting until it becomes a big issue

    I guess I don't see that as a problem if its causing a big issue.

    Let me throw it back to you: If you were providing a service and a third party client was using your resources and causing a "big issue" like you stated, would you not want to remediate the problem? Lets say you introduced a new feature, but it doesn't work for 15% of your user base because they're using an outdated third party client that may not get fixed for another year or two - if ever. What would you do?

    Here's another example, lets say someone develops a client that lets you upload significantly bigger files and has an aggressive retry rate that as more people start using your client, it starts increasing the hardware requirements for your infrastructure. Do you just say "oh well", suck it up and deal with having to stand up more infrastructure due to the third party client doing things you didn't expect? Is that reasonable?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago*

    https://hackertalks.com/comment/4806772

    They have demonstrated history of asking third party clients to not use the signal name, and not use the signal network. The client that currently exists that do this do it against the wishes of the signal foundation

    you keep moving the goal posts, Ive justified my position in the original comment.

    By all means, use signal, I do. But let's not deny the realities. I think we've covered all that we need to cover in this discussion thread. We don't have to agree and that's okay, and I wish you a good day, but I'm not going to respond anymore

  • permalink
  • fedilink
  • source
  • parent
  • [–] -1 points 2 years ago

    The servers should absolutely not trust the client. Likewise, the client should not trust the server. When that is the case it is impossible for the third client to have more functionality than the mainstream client.

  • permalink
  • fedilink
  • source
  • parent