15 ms·

This sounds good on first pass, but consider the implication of allowing donations (and thus, payment method information) to be tied to a Signal users account.

This sounds good on first pass, but consider the implication of allowing donations (and thus, payment method information) to be tied to a Signal users account. I specifically _wouldn't_ want this.

mercurialshark 6y ago
You could enable offsite donations that provide a receipt/hash that denotes (donation -> validated), without being tied to any individual. Then the user could copy/paste a generic, non-correlated code into Signal to authenticate activity.
chucky 6y ago
It's easy. You "gift" the badge to a user via the Signal homepage when making a connection. There's no required connection between the gift-giver and the receiver. Is the person who gifted the badge the same as the receiver? Could very well be, but there's no way to prove that. All you need to store server-side is "this user has the badge until date X".
- codethief 6y ago
  > Could very well be, but there's no way to prove that. Sure, but espionage and surveillance are rarely about proving anything, they're about making good educated guesses. Besides, the receiver will very likely be among your friends and acquaintances, so the NSA would only have to look at your social circle to find them.
  - echelon 6y ago
    Database has one column on the user table: display_badge_until Store no payment info.
  - cunac 6y ago
    it is amusing that you think you have fair chance if NSA/government really wants to get you. Buy hey if that makes you sleep at night be my guest.
    - codethief 6y ago
      Are you sure you're responding to the right comment? I didn't say anything like that.
BurningFrog 6y ago
Linking a donation to an account would be optional in any sane implementation.
pxeboot 6y ago
How much data is sent to the developer after somebody makes an in-app purchase?
xorcist 6y ago
They already have your phone number, closely tied to your real identity. What could they possibly do with some payment information?

This sounds good on first pass, but consider the implication of allowing donations (and thus, payment method information) to be tied to a Signal users account. I specifically _wouldn't_ want this.

mercurialshark 6y ago

You could enable offsite donations that provide a receipt/hash that denotes (donation -> validated), without being tied to any individual. Then the user could copy/paste a generic, non-correlated code into Signal to authenticate activity.

chucky 6y ago

It's easy. You "gift" the badge to a user via the Signal homepage when making a connection. There's no required connection between the gift-giver and the receiver. Is the person who gifted the badge the same as the receiver? Could very well be, but there's no way to prove that. All you need to store server-side is "this user has the badge until date X".

codethief 6y ago
> Could very well be, but there's no way to prove that. Sure, but espionage and surveillance are rarely about proving anything, they're about making good educated guesses. Besides, the receiver will very likely be among your friends and acquaintances, so the NSA would only have to look at your social circle to find them.
- echelon 6y ago
  Database has one column on the user table: display_badge_until Store no payment info.
- cunac 6y ago
  it is amusing that you think you have fair chance if NSA/government really wants to get you. Buy hey if that makes you sleep at night be my guest.
  - codethief 6y ago
    Are you sure you're responding to the right comment? I didn't say anything like that.

BurningFrog 6y ago

Linking a donation to an account would be optional in any sane implementation.

pxeboot 6y ago

How much data is sent to the developer after somebody makes an in-app purchase?

xorcist 6y ago

They already have your phone number, closely tied to your real identity. What could they possibly do with some payment information?