Evan Wang 王艾文Nov 9
Electronic Frontier Foundation
There's a more secure alternative to texting via your phone's native messaging app. Signal is a free app that employs end-to-end encryption and we have a step-by-step guide to help you learn how to use it. https://ssd.eff.org/module/how-to-use-signal
How to: Use Signal

Download location: Google Play Store, Apple App Store System requirements: Android 5 or later, iOS 13 or later Version used in this guide: Android: 7.38.6 iPhone: 7.5.1 License: GPLv3 Level: Beginner Time required: 15-20 minutes Other reading: https://signal.org/ https://support.signal.org/ https://signal.org/blog/ Table of Contents Download and Install Signal Register and Verify...

Nov 9 at 9:01pmTypefully
Show threadכָּלב Nov 9
@eff #Signal is a messaging silo. Use @snikket_im instead. #XMPP
Show threadaerootjursNov 9
@eff That's good but SimpleX Chat is the most superior. No phone numbers, metadata, and user IDs required, even.
Show threadSokianNov 9
@aerootjurs @eff

Big tech app distribution, real time location tracking via cell number, centralized silo.

How is Signal the goto for privacy or security?
I am firmly in the xmpp camp
Show threadzetabetaNov 9

@sokian @eff @aerootjurs
registration requires active phone number, but usage does not. user does not need to keep sim card in the same device.

signal also encrypts almost all metadata, signal servers does not know to whom phone number belongs to.

although, signal favors (ROTTEN) apple app store and (GOOISH) google play, still it is possible to install signal other ways. third party programs exist also, like molly.

https://signal.org/android/apk/
https://github.com/AsamK/signal-cli

Signal Android APK

Advanced users with special needs can download the Signal APK directly here.

Signal Messenger
Show threadskaphleNov 10
@zetabeta @sokian @eff @aerootjurs Yeah, "it's centralized" always seems to be the only remaining argument when you look at the details.
Show threadkitkatNov 10

@zetabeta @sokian @eff @aerootjurs

asking your mobile provider will identify you though, most likely thanks to identification using ID card these days

Show threadEliza MBNov 9
@eff sad that Signal went down with the AWS outage just a few days ago…
Show threadCharlotte AtenNov 9
@eff Why are you guys on the right side of so many issues but you keep supporting Signal?
Show threadGradientDescentNov 9

@caten @eff can you help me understand what the problems with signal are?

I know it has somewhat centralized architecture (as the other commenter also noted with the AWS outage) and there will always be the issue of human error (in the style of Hegseth/Waltz), but I'm ignorant to any issues outside those.

Show threadGradientDescentNov 9
@caten @eff never mind. I just read what sokian said... I'll need to give xmpp a try...
Show threadMeaningfulBitsNov 9
@eff I love signal, only thing that irks me is that it's phone number based. Wish I could put it on a device and just share my username. Seems weird to tie it to a phone number. I know burners exist but man, signal is as good as they come.
Show threadskaphleNov 10
@MeaningfulBits @eff Well you can share your username. You only need the phone number for registration and then it's invisible by default
Show threadLouis [OLD ACCOUNT]Nov 10
@MeaningfulBits @eff Signal has implemented usernames 2 years or so ago. You still need a phone number to sign up, but then you can give others your username to connect with you, and your phone number will not be visible (this can be changed in the options).