submitted 5 months ago* (last edited 5 months ago) by to c/privacy@lemmy.ml
 

i've just seen a comment in a post, in this very community, saying people trust signal because of missinformation (from what i could undertand).

if this is true, then i have a few questions:

-what menssaging app should i use for secure communications? i need an app that balances simplicity and security.

-how to explain it to my friends who use signal because i recomended?

-what this means for other apps in general?

you are viewing a single comment's thread
view the rest of the comments
[–] 45 points 5 months ago (1 child)

not to shit on you specifically but I see this over and over, folks asking how to be "secure". secure against what?

if you're into this, you need to set up a "threat model" i.e. what are your threat vectors and then you build your defenses against that model. a defense against blanket surveillance doesn't handle targeted threats. a successful defense against your government doesn't preclude other nation-state actors getting at you.

like, if your threat vector is e.g. your SO "inspecting" your phone, you set up a passcode and you're safe against that threat. but, if there's a toddler going around smashing stuff, your defense isn't valid. defense against that vector is placing your phone high up. but that defense isn't effective against SO.

I am sure any messenger recommended here can be successfully red-teamed, be it design flaws, operator error, the famous wrench comic, or whathaveyou. but that doesn't mean it's ineffective in your specific case.

  • source
  • hideshow 1 child comment
  • [–] 7 points 5 months ago

    Yes, i hate this in these kinds of discussions. It so often devolves into how you'll be safe from surveillance by world governments (spoiler: you won't be, if they really care).

    And here I am, just not wanting to hand data over to giant corporations that have been proven to use it for no good.

    Heck, even if there was no good actor/solution, not giving all your data to the same bad actor is already a step up.

  • source
  • parent