• someone@lemmy.today
    link
    fedilink
    arrow-up
    1
    ·
    1 hour ago

    this is bullshit designed to respond to increasing use of simplexchat and other platforms

    and they still want to tie it to payment (so a credit card) so they can track people

    and they are implementing it only after many years

    a complex captcha that takes 10 minutes to solve would work just as well as payment, but they aren’t doing it, and it certainly leaves me wondering if they are a honeypot. i can’t prove it, but it’s really suspicious it’s taken so long to possibly roll out something that may require a credit card

  • scytale@piefed.zip
    link
    fedilink
    English
    arrow-up
    25
    ·
    2 days ago

    GitHub commit d7447b1 states that “accounts without phone numbers can never get phone numbers, and accounts with them can never lose them”.

    So you’ll have to register a new account if you want to decouple your number.

  • onlinepersona@programming.dev
    link
    fedilink
    arrow-up
    6
    ·
    1 day ago

    Boy… We are going to get spammed.

    I never understood the “phone numbers are evil” people, whining about signal requiring them. As soon as this arrives, they will find another thing to whine about.

    Hopefully Signal will make it possible to block any and all communications from people wohtout a phone number, unless I reach out to them. And that that feature also be introduced to groups. Because otherwise maintaining public groups is going to be turboshit.

    • GottaHaveFaith@fedia.io
      link
      fedilink
      arrow-up
      10
      ·
      1 day ago

      mobile numbers require government identification in many countries. But yeah, not seeing an easy solution to the spam problem

      • onlinepersona@programming.dev
        link
        fedilink
        arrow-up
        3
        ·
        edit-2
        17 hours ago

        mobile numbers require government identification in many countries

        Yes and all they will know is “person A has installed signal”. Nothing more. If you haven’t degoogled tour phone or use one with a fruity logo, the government knows that you have the app already. It won’t need phone number.

        • zeezee@slrpnk.net
          link
          fedilink
          arrow-up
          5
          ·
          18 hours ago

          huh? you can’t see the difference between a grapheneos burner linked to a gov ID backed phone number and one that isn’t?

          like what happens when you go to a protest and they pull out a Stingray and get your IMEI+ICCID down that’s directly linked to you? you’re telling me you don’t see any issues with cops/ICE being able to know exactly who goes where?

          this has strong “I don’t need freedom of speech because I have nothing to say” vibes - it’s fine if you don’t see the value but I can assure there very much is

          • onlinepersona@programming.dev
            link
            fedilink
            arrow-up
            1
            ·
            17 hours ago

            You’re fighting a scarecrow in your head that you built. “This has a vibe so I’ll vibe comment”

            Once you come back down to earth and want to talk seriously, ping me. I don’t debate paranoid snow bunnies.

    • XLE@piefed.social
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      How’s it easy?

      Not the technical part (which definitely looks as easy as just dropping a requirement), but the spam/abuse prevention part.

      • quick_snail@feddit.nl
        link
        fedilink
        arrow-up
        2
        ·
        23 hours ago

        It’s pretty easy to detect spam. I guess user reports and noticing when someone suddenly messages many new users and those users do not respond.

        Anyway, it’s not an issue on Wire or SimpleX or the dozens of other platforms that don’t require phone numbers. It’s obviously a solved problem. Signal is just making up fake excuses.

  • katy ✨@piefed.blahaj.zone
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 days ago

    just go the matrix route; username, password, 2fa, then any other connection requires you to verify with a current logged in session (or recovery code).

    • ImgurRefugee114@reddthat.com
      link
      fedilink
      arrow-up
      11
      ·
      2 days ago

      As someone who uses matrix and runs a matrix server, matrix fucking suuuucks jfc why are so many privacy tools soooooo bad at what they do on so many levels like wtf the proto the servers the clients the ux the metadata issues like so much wrong

      Edit: and if anyone tells me to use XMPP I’ll slap them

      • 𝕸𝖔𝖘𝖘@infosec.pub
        link
        fedilink
        arrow-up
        1
        ·
        1 day ago

        When you send a message, and it gets delivered when the recipient is online?
        Delta has that, but you have to be online for the message to be sent later, since there’s no central server to cache it.

        • quick_snail@feddit.nl
          link
          fedilink
          arrow-up
          2
          ·
          23 hours ago

          Yes, that means it’s synchronous.

          My point is that we need servers for asynchronous messaging (or some clever network where everyone is a server relaying messages for others). Lacking asynchronous messaging is not going to be a practical solution for 99% of people.

          Encryption works. We don’t need to trust servers. They’re not inherently an issue for security nor anonymity.

          • 𝕸𝖔𝖘𝖘@infosec.pub
            link
            fedilink
            arrow-up
            1
            ·
            3 hours ago

            Thank you for the clarification. I just wasn’t sure on the terminology, but this makes perfect sense.

            We don’t need to trust servers. They’re not inherently an issue for security nor anonymity.

            For me, my issue with a central server infrastructure is less that it can be snooped on (because, to your point, properly implemented encryption does work) and more that it’s easy to be taken down or censored, since it is a central server infrastructure.
            The benefit with the every-client-is-a-server infrastructure, such as the one that Delta uses, is that if one of the many servers gets taken down, the network, as a whole, keeps working.
            Something similar can be said about the Lemmy infrastructure, really any of the Fediverse. If one of the servers gets taken down, there are still hundreds, thousands, or millions more that are serving content, even if not the exact same content, allowing the social network, as a whole, to not be subject to mass censorship.

            For the everyday, central infrastructure, such as the one that Signal uses, works perfectly fine. For those “special locations”, a decentralized every-client-is-a-server infrastructure might be a requirement. So it really is situational.