• Imnebuddy@lemmy.ml
        ·
        edit-2
        3 hours ago

        https://lemmy.ml/comment/15999861

        In the blog posts I read where the author, a security engineer, audited and/or reported vulnerabilities with two E2EE chat protocols commonly recommended as Signal alternatives--Matrix and XMPP--both had implemented half-baked solutions or refused to solve the issue at all in some regards, and both had evangelists that gave dismissive responses. The XMPP chud dev gave a laughably childish response, and the Matrix dev even admitted the team being aware of the olm vulnerability and deliberately refused to fix it for years. Not that Signal cultists are any better and not negating the legitimate security and trust issues with the Signal platform, but Signal is still a decent platform for most people's threat model, though it would be nice if there was an alternative that could compete with Signal to recommend to most people instead. If you care about metadata resistance and your threat model involves high stakes if your assets are compromised, the blog author suggests Tor-based solutions such as Cwtch and Ricochet Refresh.

      • markinov@lemmygrad.ml
        ·
        edit-2
        12 hours ago

        Depends on your threat model. Signal is fine if you just want to communicate with average joe. If you want something more anonymous look into secureX,

    • shortwavesurfer@lemmy.zip
      ·
      20 hours ago

      What seems crazy to me is how many people they managed to convince that they were private when they most definitely are not.

  • Emberleaf@lemmy.ml
    ·
    19 hours ago

    This is a difficult topic for me. On the one hand, I believe everyone has a right to privacy and we need to fight for that right. On the other hand, I'm enough of an adult to understand that law enforcement needs to be able to effectively investigate criminal activity. There has to be a middle ground there, somewhere. I just don't know where that is.

    • gubblebumbum@lemm.ee
      ·
      19 hours ago

      If they actually wanted to do something about child abuse they'd go after the conserative scum who have historically supported it and still do. Its the ones that vote for far right parties, are anti higher-ed, pro homeschooling, anti secularism, pro religious indoctrination, anti feminist, anti age of consent laws, anti sex ed, anti criminalisation of maritalremoved, anti combating domestic violence, pro child marriages etc instead they are constantly trying to attack human's right to privacy which only exist on paper.

      • Emberleaf@lemmy.ml
        ·
        19 hours ago

        But isn't advocating for the privacy of criminals the same as advocating for the crime, itself? Sure, let's go after the politicians...but are you REALLY okay with letting child molesters, etc. hide their activities from law enforcement online? Like I said, there has to be a middle ground. We just need to find it.

        • stink@lemmygrad.ml
          ·
          18 hours ago

          The moment you dissolve rights to privacy for X scenario, you open dissolution for Y and Z as well

        • root@lemm.ee
          ·
          14 hours ago

          "Child molesters etc" have been online since the internet has existed and very little is done about it. They have also been active offline and very little is done about that too. If they wanted to go after them they would. They don't, because it is not in their interest to. The threats they will go after are people they disagree with and who their higher ups want targeted. You are always in more danger from authorities than "bad guys" are.

    • catloaf@lemm.ee
      ·
      16 hours ago

      It's the warrant process and true encryption. If the cops think you've done something bad, they go and get a warrant. The provider turns over what they have, which should just be account info and metadata. Then the cops do good old fashioned police work and get a warrant for your personal stuff which they'll seize and analyze.

  • Mohamad20ZX@lemmy.one
    ·
    17 hours ago

    Welp then I think we have to sue them to oblivion S/ But really can’t blame most people whose Are Accustomed to using TeleGram And WhatsUp