• 2 Posts
  • 56 Comments
Joined 2 years ago
cake
Cake day: June 22nd, 2023

help-circle

    1. There’s data-sharing agreements with more than just the N eyes countries
    2. If there’s an international warrant for that data the company is obliged to comply regardless

    The only countries in which n° 2 doesn’t apply for the US are countries you really don’t want your data in either.

    In short, however: if a government really wants your data it will find a way to get it no matter where you store that data, so the best thing is to simply not store that data at all, Mullvad and Signal don’t do that.


  • I mean maybe but you could also just say “we did some whacky shit here help us fix it please” and let the community help you in the effort. That’s the beauty of open source. Then again they may have their reasons and frankly I’m not even interested in a TikTok like social media so w/e as long as they don’t eat up their word it’s fine.


  • EuroNutellaMan@lemmy.worldtoFediverse@lemmy.worldHappy #GlobalSwitchDay
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    3 months ago

    Jurisdiction is not that important. Even if it was in Switzerland it’d have to comply with international law enforcement and warrants. The key is that sure Signal is obliged to give out whatever data it has, but the point is that it doesn’t have much useful data to give. It’s the same as Mullvad, and a far smarter approach than “lol we just gonna ignore the warrant huhuhu look at us we host somewhere in Shitzerfuck” (oh btw “We are in X country which is not in N eyes” is just marketing).

    Oh and btw the same goes for instances of the fediverse (which are ran by volunteers you need to trust), and if they don’t comply and the US government really wants to break into them they probably will find a way. Doesn’t even need some complicated backdoors or anything it just needs to find an OPSEC slip-up, do some social engineering, arrest someone or at worst find a bug to exploit, and I can guarantee that unless you have some serious security wizards running your instance you’re not beating the FBI there and if the FBI is really persistent and focused on you for some reason then the wizards won’t be enough you need state actors.

    If your threat model actually includes the US government (aka you’re actually in danger and not some paranoia or just-in-case situation, be realistic with yourself) and there’s credible threats you may be targeted by it or other governments then you’re probably going to be using tor, briar, all that jazz, and wouldn’t be on lemmy. If you’re just some guy who just needs to message your family and shit Signal is perfectly fine, I can tell you that unless you’re a serious threat to the government they won’t waste resources cracking down ways to capture you via signal or whatever you use that is even somewhat secure (so no telegram, no WhatsApp, no messenger, etc), even if you’re a minority or activist, if not because you’re not important enough then because they have other easier ways to do it.

    Edit: oh and btw Signal was banned in Ruzzia (a country way more authoritarian than the US currently is) because the FSB couldn’t crack it so that goes to show it is pretty secure.



  • EuroNutellaMan@lemmy.worldtoEurope@feddit.orgSo what now?
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    3 months ago

    Just because it “works on your machine” doesn’t mean it works for many. You were lucky, but I, for example, have witnessed several instances of people not being able to see each other’s messages in the local LUG group because of encryption vs within instances. I also had my bridges break because of it.

    I was also able to join rooms and shit but I found it unintuitive and I know for a fact that someone like my grandma, mother, aunt, most of my friends, etc would not find it will struggle with it and won’t bother because it is a pretty silly way to navigate it. There’s a bias here: you are on Lemmy, you’re already more familiar with these concepts than the average user so obviously for you it is easier, but for others it is not atball easy to mavigate and in fact it can be very confusing, and it would be silly and counterproductive to dismiss that as them not wanting to learn and to say that matrix is as well developed as WhatsApp, Telegram or Signal, cause from a functional point of view it just isn’t.

    P.S.: I realize the tone of my message may seem a bit hostile from the text but it’s not meant that way.


  • EuroNutellaMan@lemmy.worldtoEurope@feddit.orgSo what now?
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 months ago

    Within volt views are probably mixed. Dure there may ne some starry-eyes but you won’t get far without a dream after all. And again it’s not something that can’t be fixed by joining and contributing, which is probably better than sitting on your screen and being on Lemmy to debate how everything is flawed tbf.



  • EuroNutellaMan@lemmy.worldtoEurope@feddit.orgSo what now?
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    3 months ago

    yeah when it works it’s cool, but it doesn’t always work.

    Plus the user experience for anyone who not only isn’t tech literate but neither fairly tech savvy can be a pain. Navigating the way into joining rooms, DMing people, etc is pretty confusing (even for someone like me, who can manually install Arch for example[1]) and that’s without mentioning all the E2EE problems with federated instances, etc, which not only can mean sometimes users can’t see each others’ messages but it can even break bridges.

    Oh and the bridges may be cool but they’re also kinda shit, I mean the TG one can’t handle supergroups, WhatsApp often requires you to open the app anyway to view certain content, I don’t use the signal bridge cause I don’t mind using signal. Oh and tbh bridges only exist because we still need to talk to some folks in the other places, but they do not provide you any extra privacy, your message is still going in telegram/meta’s servers and through their apps (which realistically you’ll also still need to keep installed anyway) etc and on top of that it will also go through the servers of whoever is hosting your instance.

    Yes self-hosting is an option, no your average joe will not do it and it is absurd to ask them to, and self-hosting for your whole community is nice but it gets hard if you’re on your own and good luck if you have quite a few friends to actually talk to that have to be in your instance.

    Unfortunately, messaging apps are meant to do one job: talk with people, and in order to do that privately and securely you need to get people on the chosen app[2] and therefore it needs to be easy enough to grasp that even people who don’t know what an OS is can get them, hence why Signal beats out Matrix (and getting people to switch to Signal from WhatsApp or Telegram is still pretty challenging).

    So this is why I believe it’s less developed. Matrix is probably not the only made in Europe project tbf, and besides even US things can be used if they are open source.


    1. obligatory I use arch btw ↩︎

    2. refer to part about bridges ↩︎