Mastodawn

Vibuda Nimsara Dec 23

Getting a new phone for the holidays doesn’t mean giving up Signal message history. Restore old messages on a new phone using Signal Secure Backups or device-to-device transfer.

https://support.signal.org/hc/en-us/articles/10074659364122-Backups-and-Device-Transfers-on-Signal

Backups and Device Transfers on Signal

Signal offers several secure options for backing up or transferring your messages, depending on your device and situation. Signal Secure Backups are an optional, secure backup solution that store y...

Signal Support

Patrick.PSC Dec 23

@signalapp Signal war gut und wird immer besser. Viele sprechen von einer Alternative. Ich sehe es eher als DER erwachsene Messenger und das ist alternativlos. Bleibt eurer Linie treu.

@psc
Es verrät einem halt niemandem wie man selbsthosted mit Föderation. Das geht vei XMPP und Matrix seit Jahrzehnten.
@signalapp

Patrick.PSC Dec 23

@astro @signalapp Du hast recht und es wird auch immer bessere Lösungen geben, aber man muss diese finden, die für einen selber und auch für weniger Technik affine Menschen geeignet ist. Und da bietet #Signal das beste Gesamtpaket. Ich wollte keine Insellösung. Mögliche Optionen habe ich damals abgewogen. Solange Signal den Weg wie bisher unbeirrt weiter geht, ist das für mich und viele meiner Bekannten die richtige Wahl.

@psc
Insellösung? Mein Jabberserver hat auch mit Google Talk und GMX gesprochen. Das kriegt Signal überhaupt nie hin. Ziemliche Zurückentwicklung!
@signalapp

Patrick.PSC Dec 23

@astro @signalapp Ok, vielleicht war „Insellösung“ nicht der perfekte Ausdruck. Wie gesagt, es gibt viele Lösungen und jeder hat seine Präferenzen. Meine ist Signal und dies so lange wie die Linie eingehalten wird. Mir ist wichtig, dass viele in meinem Bekanntenkreis dies nutzen und das ist so, egal ob jung oder sehr alt, privat oder beruflich.

@psc Ich fände es bedenklich wenn bestimmte Berufsgruppen ihre Metadaten (wer mit wem kommuniziert) auf US-Server leaken.

Patrick.PSC Dec 23

@astro Der Hinweis ist berechtigt. Genau deshalb beschäftige ich mich bewusst mit dem Thema. Signal speichert nach aktuellem Kenntnisstand nur sehr wenige Metadaten und gilt im Vergleich zu vielen anderen Lösungen als datenschutzfreundlich.
Mir geht es nicht um eine unkritische Festlegung, sondern um eine informierte Abwägung unter Berücksichtigung von Datenschutz, Praktikabilität und Akzeptanz. Alternative Lösungen betrachte ich dabei ausdrücklich mit.

@psc Wie sollen sie die Nachrichten zustellen wenn sie nicht wissen dürften mit wem du schreibst?

Einige Dinge sind inhärent und bedürfen gesetzlichen Schutz, den es in den USA nicht gibt.

Sehr erfreulich dass du Alternativen eine Chance gibst.

Patrick.PSC Dec 23

@astro Dass für die Zustellung gewisse Metadaten technisch notwendig sind, ist unstrittig. Entscheidend ist für mich nicht das Ob, sondern das Ausmaß, die Speicherdauer und der rechtliche Rahmen.
Genau deshalb bewerte ich Signal nicht isoliert, sondern im Vergleich zu Alternativen – insbesondere unter dem Aspekt des US-Rechts.

Jared Wray Dec 23

@signalapp I really wish the world would move from WhatsApp to Signal. It is such a better choice.

@jaredwray @signalapp

I really wish the world would move from linking everything to a phone number. But yeah, #Signal > #WhatsApp.

Joan Lledó Dec 24

@jaredwray @signalapp not sure what to think. Signal looks better, yeah, but with Whatsapp, at least we know who is paying for it.

Jared Wray Dec 24

@jlledom @signalapp thats the point of signal. It is a foundation so you can donate to it and there is no mega corp that could be influenced.

Joan Lledó Dec 24

@jaredwray @signalapp yeah, that's true. But how much would it cost to maintain such a infrastructure? Not less than several tens of millions per year for sure. I'm reluctant to think signal can be funded only with donations from regular people like me. And big donors would want to get something in exchange, don't you think? It'd be good if signal disclosed who is paying for it.

Fermín Grodira Dec 26

@jlledom @jaredwray @signalapp who is paying for Wikipedia? Its users. Same thing

@signalapp @jlledom @jaredwray

“We estimate that by 2025, Signal will require approximately $50 million dollars a year to operate”

https://signal.org/blog/signal-is-expensive/

Privacy is Priceless, but Signal is Expensive

Signal is the world’s most widely used truly private messaging app, and our cryptographic technologies provide extra layers of privacy beyond the Signal app itself. Since launching in 2013, the Signal Protocol—our end-to-end encryption technology—has become the de facto standard for private commu...

Signal Messenger

Jared Wray Dec 30

@bjarne @signalapp @jlledom

We should all donate to it.

🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉Dec 23

@signalapp #SilentWhisper needs to be patched 💡 ☑️

Derek Morr Dec 23

@nemo @signalapp it’s not trivial to fix. See this discussion from Signal https://github.com/signalapp/Signal-Android/pull/14463#issuecomment-3682415518

Anti timing attack features by sullystuff · Pull Request #14463 · signalapp/Signal-Android

First time contributor checklist I have read how to contribute to this project I have signed the Contributor License Agreement Contributor checklist I am following the Code Style Guidelines...

GitHub

🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉Dec 23

@derekmorr @signalapp

Hi Derek thank you for the Link :) don't get me wrong I'll still use it.

Yeah I've read that still it should definetively adressed sometime :)

Best regards 👍

Heath Borders Dec 23

@signalapp I ended up using your online backup service bc I support your mission, but also device-to-device transfer with wifi direct did not work for me. It only barely worked 9 months ago when I switched from Pixel 7 Pro to Pixel 7 Fold, and I never got it working from Pixel 7 Fold to Pixel 9 Fold 🤷🏻‍♂️

Alex@rtnVFRmedia Suffolk UK Dec 23

@heathborders @signalapp

whilst not a complete disaster (as I've never used Signal solely to store important info and always assumed the messages were ephemeral, its always backed up somewhere else), I've never got the message backup to work when changing devices, it just locked up and didn't seem to be storing/transferring anything..

𝓒𝓱𝓻𝓲𝓼 Dec 23

@Raymond
zeit zum weiter wechseln zu einem dezentralen und freien messenger : #^https://delta.chat/de/

Import und Export funktioniert dort 100%

Delta Chat: Delta Chat, Dezentralisierter, sicherer Messenger

Delta Chat ist ein dezentralisierter und sicherer Messenger 💬 Zuverlässiges Instant-Messaging mit Unterstützung für mehrere Profile und mehrere Geräte ⚡️ Bei sicheren und interoperablen Chatmail Re...

@signalapp
You should officially support third-party clients for greater decentralisation and so that it's easier for them to support all features including Signal Secure Backups.

Talya (she/her) 🏳️‍⚧️✡️Dec 23

@light @signalapp you can already connect third party clients. the Signal team even on occasion works with the Molly team on features.

@Yuvalne
Oh ok. That's good. I use Molly-FOSS myself.
Glad to see it's position (and that of other forks) is not as precarious as I feared.
@signalapp

@light @signalapp With third party clients you can't be sure that they are respecting your privacy. Imagine a third party client using google firebase notification system. Suddenly google has access to your messages, because the person you're messaging uses a different client.

@marco
1) I use #Molly-FOSS, which does not have any Google code and supports UnifiedPush
2) Doesn't Signal use FCM?
3) If the Signal Foundation controls both the running and development of the only server and the development of the only client, then the system is no longer secure against the second party, which obviates the point of end-to-end encryption. Signal can backdoor the Signal app to access your messages, contrary to their claim that not even they can access your messages. @signalapp

I can't remember the blog post where I got point #3 from, but it was a good argument.
@signalapp @marco

@signalapp
I found it: https://www.moparisthebest.com/against-silos-signal/
@marco

moparisthebest.com - Against Silos+Signal

The home of runescape cheating

@signalapp @marco or maybe it was a different one actually

@light I appreciate your research, I didn't read the post carefully, though. The author uses very aggressive language and I don't think I'm educated enough to get all their points. I get that this could be an issue, but then again, signal is open-source and driven by a non-profit. I get that there's a threat, but it's basically non-existent imo and I'm okay with that. With using signal I'm at least not completely isolating myself, due to the growing popularity in Germany. Thanks though!

Is "second party" the right term?

@light @toji You're right, Signal uses FCM which surprises me.
Since Signal is Open-Source, you could see if they tried to backdoor the app. Third party clients can still be malicious, since they have access to your unencrypted messages.

Alexandre Oliva Dec 30

google, by virtue of controlling the operating system, has access to your plaintext messages as you type them in, and as they get displayed, which is much worse than the notification system's getting to them while encrypted. if you choose to believe it gives up the more interesting access it has, why wouldn't you believe it will also refrain from peeking at the useless cyphertext?

CC: @[email protected] @[email protected]

Viacheslav A Dec 23

@signalapp Hmm, no comments about mandatory phone number or running server part on aws, this is suspicious

Copernicron Dec 23

@signalapp is there wa way to transfer iPhone to android or vice versa?

Talya (she/her) 🏳️‍⚧️✡️Dec 23

@copernicron @signalapp ...did you click on the link?

Copernicron Dec 24

@Yuvalne @signalapp I tried a couple weeks ago and it didn’t work. That’s why I asked.

Talya (she/her) 🏳️‍⚧️✡️Dec 24

@copernicron @signalapp did you try the method specified in the link?

@signalapp I love signal, but even after abandoning all messengers except signal and matrix, my friends an family would rather send me SMS instead of downloading Signal. It's sad to see no one cares about their privacy.

Talya (she/her) 🏳️‍⚧️✡️Dec 23

@marco @signalapp yeah it's hard. there are days where i debate deleting my WhatsApp account and see who cares enough to get Signal to talk to me, but i'm quite afraid i'd find out people consider not downloading a second messenger to their phone as more important than certain relationships.

@Yuvalne @signalapp I deleted WhatsApp years ago and told everyone that if they don't want to download an app for me they can SMS or call me. You're not completely isolated, but I think it's an important step, also so people start thinking about their own privacy.
I'd say take the plunge and see what happens! Worst case scenario is you redownload WhatsApp and go back to the status quo

@marco @signalapp I got a data plan, and then people had no option other than to contact me on #SignalApp, #DeltaChat, #Matrix, etc.

Before when I preached privacy and freedom, there'd always be push-back whereas now people just accept as they're surely not going to pay monthly for a more expensive plan for me. . .

#FreeSoftware #degoogle #networkeffect

Jon Gilbert Dec 24

@signalapp ...yeah, ONLY if the devices are compatible. My previous phone didn't have a backup my new phone could accept, and all my message history was lost. This was two days ago. 🤷‍♀️

(I am hopeful that the next time I change phones, this'll be no longer a problem.)

Sebastian "spaetz" Spaeth Dec 25

@signalapp if you only had told me before I dropped my phone on the concrete floor last week 🤦‍♂️. Anyway, who needs history....

Valentyn Prozherin Dec 27

@signalapp Why can't I store my backup data on my own cloud, for example via @nextcloud?

vladfedchenko Dec 28

@signalapp An option for backup to a common cloud provider is a must. Please integrate with Nextcloud, or at least give an option to backup via something like WebDAV.

vladfedchenko Dec 28

@signalapp An option for backup to a common cloud provider is a must. Please integrate with Nextcloud, or at least give an option to backup via something like WebDAV.

Jerry 🇸🇪Dec 28

@signalapp @AngelaScholder

Backup to local file, URL, or WebDAV, please.

Angela Scholder Dec 28

@jerry1970 @signalapp I would prefer to just have an encrypted backup to external memory, or an external disk connected to my mobile.
Or indeed direct to my NAS, which could be WebDAV indeed.
No online storage from anyone else.

I guess copying the local backup to my NAS probably also works.

Jerry 🇸🇪Dec 29

@AngelaScholder @signalapp Yep, that's what I meant. I want to tell where the backup file has to go.

@signalapp ,https://cybernews.com/security/whatsapp-signal-real-time-tracking-battery-drain-flaw/
And what will the respected Signal, headed by Meridith, say about this?

Compassionate Crab Dec 30

@signalapp
New Fairphone 6 (in US, yay!). To transfer my account, (I don't need any message history), it says I must have Signal installed on both phones. I can't get the app on the new phone. "No eligible devices for app install". What am I missing?