Signal needs a phone number. Why are we dismissing this as privacy versus anonymity when governments are blocking the registration SMS?
from autonomoususer@lemmy.world to privacy@lemmy.ml on 10 Sep 20:00
https://lemmy.world/post/35730511

I really don’t get why so many people are turning this into a privacy versus anonymity debate when the real problem is censorship.

Yes, Signal needs a phone number to sign up, but replacing that with an email or username doesn’t make it anonymous. The real issue is that governments are blocking the registration SMS, so people can’t even sign up for the app in the first place.

Sure, there are workarounds, but most people aren’t going to jump through all those extra hoops just to use an app. If we want to spread privacy, how do we do that when Signal’s phone number requirement is actively working against us?

Instead of arguing over privacy versus anonymity, shouldn’t we focus on making sure everyone can access Signal without issues? What do you think?

#privacy

threaded - newest

birdwing@lemmy.blahaj.zone on 10 Sep 20:05 next collapse

Anonymity is part of fighting censorship. State actors will try to undermine that.

commander@lemmy.world on 10 Sep 20:09 next collapse

it’s been asked a lot and I’ve seen others respond about how the passcode and account username that were added in the last few years are steps in the process to make accounts not dependent on phone numbers. I’ve just given them the benefit of the doubt that someday we won’t be tied to a phone number anymore

[deleted] on 10 Sep 20:12 next collapse

.

autonomoususer@lemmy.world on 10 Sep 20:20 next collapse

I don’t see this announced on their website.

gravitywell@sh.itjust.works on 10 Sep 20:39 next collapse

Yes it does

Don’t spread misinformation

Steve@communick.news on 10 Sep 20:59 collapse

It does need one to sign up and make your account.
It no longer needs one to contact somebody. You can share a username instead of your phone number. That may be what you’re thinking of.

Ulrich@feddit.org on 10 Sep 23:08 next collapse

Where are you seeing gov blocking SMS?

iturnedintoanewt@lemmy.world on 11 Sep 01:09 next collapse

How about this - in order to get a sim card to receive that SMS in most EU countries, you need first to provide your ID to the goverment. Also applies for many other countries with less rights. Some of which might become suspicious if it’s a second separate SIM to your normal use one. So yeah, so much for anonymity.

Ulrich@feddit.org on 11 Sep 01:12 next collapse

  1. That didn’t answer my question
  2. Doesn’t matter what country you’re in. You don’t need a SIM. All you need is a number, which you can get from a variety of places like MySudo or jmp.chat
  3. No one said Signal provided anonymity.
autonomoususer@lemmy.world on 11 Sep 04:38 collapse

2 and 3 are the whole point of the original post.

Ulrich@feddit.org on 11 Sep 05:19 collapse

How do you figure?

fmstrat@lemmy.nowsci.com on 11 Sep 13:14 collapse

Sure, there are workarounds, but most people aren’t going to jump through all those extra hoops just to use an app.

Ulrich@feddit.org on 11 Sep 17:35 collapse

Must not be important to them then.

XTL@sopuli.xyz on 13 Sep 18:59 collapse

And that’s one way to make things marginalized.

shades@lemmy.dbzer0.com on 11 Sep 05:06 collapse

you need first to provide your ID to the goverment.

Doesn’t need to be a government issued ID iirc, also doesn’t have to be issued by the country you are trying to purchase it in.

autonomoususer@lemmy.world on 11 Sep 04:36 collapse

github.com/signalapp/Signal-Android/issues/11561

Ulrich@feddit.org on 11 Sep 05:18 collapse

There’s any number of reasons for SMS not to be sent. I’ve had this problem on various platforms as well.

autonomoususer@lemmy.world on 11 Sep 05:31 collapse

The point is that people can’t sign up for Signal due to blocked SMS. Arguing privacy versus anonymity is pointless when there is a denial of service.

Ulrich@feddit.org on 11 Sep 06:01 collapse

These are 2 unrelated conversations. If you want to have either one of them, we can do that, but you can’t use one to argue the other. You can’t argue that you can’t sign up for Signal because the service isn’t private. That’s simply inaccurate.

autonomoususer@lemmy.world on 11 Sep 06:12 collapse

This is never written anywhere in that comment. Is it too hard to read? Which part is confusing?

Ulrich@feddit.org on 11 Sep 06:16 collapse

You haven’t provided any evidence that it’s “blocked” or that there is any “denial of service”. As far as I can tell, the user has network issues.

autonomoususer@lemmy.world on 11 Sep 06:30 collapse

Why are all the ‘network issues’ always effecting phone numbers starting with the same country code?

Ulrich@feddit.org on 11 Sep 06:32 collapse

Are they?

autonomoususer@lemmy.world on 11 Sep 06:35 collapse

Get a number like theirs and try it yourself.

Ulrich@feddit.org on 11 Sep 07:12 collapse

Okay so you don’t have any evidence.

Even if they are, like I mentioned elsewhere, just get a VoIP number.

autonomoususer@lemmy.world on 11 Sep 07:39 collapse

You were given the evidence. It’s clear you don’t want evidence. A VoIP number does not solve this as the original post already explains.

Ulrich@feddit.org on 11 Sep 08:09 collapse

You haven’t provided any evidence. Only an anecdote.

dessalines@lemmy.ml on 10 Sep 23:34 next collapse

shouldn’t we focus on making sure everyone can access Signal without issues?

I’d rather ppl not use US-based centralized services, hosted on amazon’s servers, and subject to national security letters.

There are far better self-hostable alternatives that aren’t hosted in burgerland.

WalnutLum@lemmy.ml on 10 Sep 23:39 next collapse

I know of matrix, what are some other alternatives?

Also a protocol that got falsely maligned during the crypto days was secure scuttlebutt, and people should be talking about it more.

dessalines@lemmy.ml on 10 Sep 23:44 collapse

Matrix, SimpleX, Briar(not a huge fan of this one since its android only), XMPP (only if you have encryption addon).

autonomoususer@lemmy.world on 11 Sep 03:56 next collapse

github.com/signalapp/Signal-Server

But you’re right about decentralisation. The main issue is:

lemmy.world/comment/19308972

dessalines@lemmy.ml on 11 Sep 04:51 collapse

They went a whole year without publishing updates to repo a few years back, until there was a big community backlash over it. Also you have no guarantee that’s what they’re running other than: “just trust us”.

autonomoususer@lemmy.world on 11 Sep 04:57 collapse

What is this slop? Libre software has never meant we control what other people do with their servers.

Amaterasu@lemmy.world on 11 Sep 15:51 collapse

Not opposed to the overall message but for the national security letter it worth remind people that the communication is E2EE, before propagating some certain level of panic.

herseycokguzelolacak@lemmy.ml on 11 Sep 18:49 next collapse

E2EE isn’t the magic solution everyone claims to be: xkcd.com/538/

dessalines@lemmy.ml on 11 Sep 20:44 collapse

Even with full e2ee, they still have

  • Your real identity (via phone numbers)
  • The real identities of everyone you talk to
  • Who you messaged, and when

With this its easy to build social networking graphs, and tag everyone implicated with a targeted account as an accomplice. Reading and trying to build meaning from the e2ee message content is almost less important than social graphs.

Sailor88@lemmy.world on 10 Sep 23:40 next collapse

We should be working to get more people to use XMPP rather than signal, Whatsapp, etc.

autonomoususer@lemmy.world on 11 Sep 04:45 collapse

Yes but Signal is libre. If you’re already failing, stop making it harder. Get others to care first, then go for decentralisation.

monovergent@lemmy.ml on 11 Sep 02:17 next collapse

I credit a good part of my success bringing friends and family over to Signal to the fact that it emulates what ordinary people are used to: a centralized service where people’s identities are associated with phone numbers. No need to teach them anything new, just download it, punch in your number, and then punch in my number. I think Signal is targeting exactly that and putting more anonymous and decentralized models way on the back burner. Concepts as simple to us as ‘instances’ are surprisingly difficult to explain to newcomers, and I wouldn’t be surprised if accounts not associated with phone numbers pose a discoverability issue.

This all might be sidestepping the question a bit since I haven’t dug deep into the issue, but my thinking is that Signal, in its current state, should be seen as a transitional solution until things like SimpleX become more mature and widespread.

Schlemmy@lemmy.ml on 11 Sep 21:57 collapse

It is a centrakized service.

And yes, the familiarity makes it easy to get people to switch. The phone numbers made my contact discoverable so I had an easy way to find out they’re on signal.

rumba@lemmy.zip on 11 Sep 05:46 next collapse

Different people have different wants and needs.

Your real problem might be censorship.

But your uncensored messages are going to other people who might have a problem that’s not censorship. When you sent that message to your uncle last week about all the horrible things done around the world, and he gets stopped at the border to another country, and they used a certain unlocking software provided by another country with a really big intelligence service. Now his ass is waiting in lock up for agreeing with you on a message. His problem isn’t censorship.

There are lots of ways to avoid censorship. There are very few to remain anonymous while you’re doing it.

herseycokguzelolacak@lemmy.ml on 11 Sep 10:07 collapse

Everytime Signal fanboys hype Signal up, it reminds me of this XKCD: xkcd.com/538/

also: lemmy.ml/post/35962253/21003480

Evotech@lemmy.world on 11 Sep 18:17 collapse

You can just do self deleting texts.

herseycokguzelolacak@lemmy.ml on 11 Sep 09:55 next collapse

Signal is like TSA: it’s security theater. Any entity serious about security will not do these things that Signal is doing:

  • Hostility to non-Google appstores
  • Using phone numbers and SMS for signup
  • US-based entitity controlling the ecosystem
icelimit@lemmy.ml on 11 Sep 10:05 collapse

So what messaging platform is actually serious about security per the points you have described?

herseycokguzelolacak@lemmy.ml on 11 Sep 10:06 collapse

SimpleX is promising, but seems very new.

Telegram is better than Signal on many angles, but has other problems.

I don’t think there is a perfect app yet. But Signal’s aggressive marketing is security-theater, not real security.

dessalines@lemmy.ml on 11 Sep 20:46 next collapse

There’s a lot of dead accounts downvoting you BTW.

Schlemmy@lemmy.ml on 11 Sep 21:52 next collapse

Telegram as a platform is amazing. Feature rich while still easy to use. Easy to create useful bots too. Sadly the rest is questionable.

herseycokguzelolacak@lemmy.ml on 12 Sep 08:53 collapse

Telegram is what Signal is pretending to be. Telegram has other serious problems, but still lightyears ahead.

Lychee@lemmy.ml on 11 Sep 22:39 collapse

Using SimpleX for some time now, can only recommend… only had an issue in France, though last time it just worked.

Sxan@piefed.zip on 11 Sep 15:37 collapse

https://fair.tube/w/4QCyVXns5fpUUqhkQRnu3b?start=2m25s

Starts in Deutsche; she switches to English for þe talk.