haffenloher

6 ms·

1.
by haffenloher 4y ago
> Repeatedly refusing to fix this widely reported issue with non-sensical explanations What are you referring to? An option to choose your backup location got added two years ago. It works on Android 10 and above. https://gith
2.
by haffenloher 5y ago
It does not proxy through your phone. After the initial setup, you can switch off your phone and the desktop client will work just fine.
3.
by haffenloher 5y ago
> nobody is able to fund huge servers with millions of users without infinite money. For example, Signal and Telegram are both struggling with that currently I'm willing to believe that this is true for Telegram, since they do prett
4.
by haffenloher 6y ago
> if you newly join Signal, every Signal user in your address book will be notified No. People who have your number in their address book will be notified.
5.
by haffenloher 6y ago
> Werner Von Braun was an actual nazi. He was also a great scientist. Some recent research suggests he might not have been that great a scientist after all. The story goes that he was an impostor who got to his position mostly due to his
6.
by haffenloher 6y ago
I work in academia in a STEM field. I've never seen or heard of a reviewer asking for access to the raw data used to produce a paper. Reviewers typically operate under the assumption that you're not trying to deliberately mislead
7.
by haffenloher 6y ago
Weird, I don't remember ever seeing that and I don't have a last name set. Can't you just "confirm" it not to include a last name?
8.
by haffenloher 7y ago
That's been fixed a few months ago. The setting now sticks until you manually change it back or your contact replies with a Signal message.
9.
by haffenloher 7y ago
In the context of this talk, APN means "Apple Push Network", I think. The concern is that even if the service doesn't ask for a phone number directly, it does still have an APN or GCM/FCM push token. Through the push pro
10.
by haffenloher 7y ago
Maybe I'm misunderstanding what you're trying to say, but remote attestation is in fact exactly what they're doing with their contact discovery: https://signal.org/blog/private-contact-discovery/
11.
by haffenloher 7y ago
Two small corrections: Signal-Android's backup works with a passphrase only (no QR codes involved) and does not cause safety number changes on restore.
12.
by haffenloher 7y ago
Thanks for the link. I found the article to be pretty convincing until I decided to check out the WaPo article the author references in this paragraph: > Pyrethroid insecticides are supposedly low in toxicity to mammals and birds, but as
13.
by haffenloher 7y ago
For an explanation on how Signal achieves forward and future secrecy, see https://signal.org/blog/advanced-ratcheting/ (or https://signal.org/docs/specifications/doubleratchet/ for
14.
by haffenloher 7y ago
Sure. Messaging via Signal (or via any other modern mobile messaging app) is designed to be asynchronous and doesn't require all participants of a chat to be online at the same time.
15.
by haffenloher 8y ago
> It seems Nadim (the author of this paper) took it really badly when we called him out for intentionally spreading fake news this weekend. Is this seriously your official response to this paper? Is this an official company account?
16.
by haffenloher 8y ago
> You do need to be aware of the risks around whatever phone number you use to bootstrap your way in possibly being reallocated. They recently added an optional "Registration Lock" feature to address this: https://su
17.
by haffenloher 10y ago
> they're wasting resources implementing video chat which noone really asked for Could you expand on this? What data are you basing this on?
18.
by haffenloher 10y ago
https://whispersystems.org/bigbrother/eastern-virginia-grand...
19.
by haffenloher 10y ago
> Certainly a NSL might compel OWS to add additional logging NSLs cannot be used for that. They're a legal tool that can be used to extract certain types of information (such as subscriber information and maybe a little bit of trans
20.
by haffenloher 10y ago
> What if I never want to share my location, take pictures, or send files? Don't use these features and / or disable the corresponding permissions.
21.
by haffenloher 10y ago
> For that matter, there's no stopping Google from doing the same. That's the exact reason why package signing is decentralized in the Android ecosystem. All apps in the Play Store are signed by their developers.
22.
by haffenloher 10y ago
This is a common misconception: NSLs are a legal tool that can be used to extract certain types of information (such as subscriber information and maybe a little bit of transactional information) that a service provider already has stored o
23.
by haffenloher 10y ago
> Switching from Signal to WhatsAPP is very expansive because you need to rebuilt your social [graph] It's not and you don't, because your entire social graph is on your phone, in your address book. That's precisely the po
24.
by haffenloher 10y ago
NSLs are not magic [0]. They are a legal tool that can be used to extract certain types of information (such as subscriber information and maybe a little bit of transactional information) that a service provider already has stored on their
25.
by haffenloher 10y ago
Let the SMS verification expire and do a phone call verification. Concerning multiple devices: I use Signal on my phone and on two desktops, works perfectly fine.
26.
by haffenloher 10y ago
Yeah, they prefer if you don't distribute your builds (i.e. something named Signal and / or using their servers) to other people (because they don't actually know what's inside the builds, they've got no update chan
27.
by haffenloher 10y ago
> You can compile Signal yourself, and install it on a rooted phone [...] OWS doesn't then allow you to use their servers for routing/discovery etc ? That's a misunderstanding. You can of course use the official servers wi
28.
by haffenloher 10y ago
You can still register with some landline or VoIP number if you want.
29.
by haffenloher 10y ago
Unfortunately, hashing provides no meaningful protection here. The preimage space (i.e. the set of all possible phone numbers) is just too small. See https://whispersystems.org/blog/contact-discovery/
30.
by haffenloher 10y ago
> You cant even use a online voip phone number for this app. That's incorrect. Signal works perfectly fine with any mobile, landline or VoIP number.

More ›