this post was submitted on 11 May 2025
186 points (86.3% liked)

Privacy

37780 readers
567 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I remember a time when visiting a website that opens a javacript dialog box asking for your name so the message "hi " could be displayed was baulked at.

Why does signal want a phone number to register? Is there a better alternative?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 2 days ago* (last edited 2 days ago) (28 children)

Jami.net

Ignore the comment saying signal is "end to end encrypted" "private" etc They are simply stuck in a delusional state where they try to convince themselves that signal is the best option so they can continue using it. Nothing is private if it isn't fully libre because you never know what the proprietary code is doing. The signal protocol itself has its source code released, and the encryption and security code is publicly available, but the signal Foundation has stated that it uses both free code and proprietary code. Their reason is UI, but it's hard to make sure whatever proprietary code is being used for because you simply can't see it. As GNU puts it: "You're walking in a pitch black cave". Jami is fully libre and is a GNU project. You don't even need any phone number!

[–] [email protected] 2 points 1 day ago (3 children)

Molly.im is a Signal Client fork with Security enhancements and the possibility to install a version with only free software.

[–] [email protected] 3 points 1 day ago (1 children)

Great, but it relies on signal's servers, so it's centralised. Also, Moly merely removes proprietary parts from Signal, but that’s a workaround (same thing for linux-libre kernel, it's free software, but just a workaround which is why I'm looking to help with HyprbolaBSD). I'm not coming here to say Molly isn't an improvement, but being centralised and relying on a non-tully-free program's servers is a huge red flag for me :)

[–] coconut 0 points 11 hours ago (1 children)

It doesn't matter whether a server claims to run free software or not. You can't verify what it's running. That's why E2EE is designed entirely around the client. You can't trust the server no matter what.

[–] [email protected] 1 points 5 hours ago* (last edited 5 hours ago)

Did anyone say that was the problem? It will not matter how encrypted your messages are when the centralised service gets easily banned.

load more comments (1 replies)
load more comments (25 replies)