moxie

9 ms·

1.
by moxie 6y ago
A lot has changed since 2014, and this might actually be possible now. It could be tough to do this right and figure out what to do with the edge cases like importing a WA conversation that overlaps with an existing Signal conversation, or
2.
by moxie 6y ago
Yeah, bummer. There were some iOS 14 changes that made this stop working as reliably, which was unfortunately right around the time people were getting new devices. It should be better now, and we're working on more stuff in this area.
3.
by moxie 6y ago
They store your social graph in plaintext on their servers.
4.
by moxie 6y ago
> Still stupid, shouldn't they ask if I want that functionality? It's kind of a difficult thing to ask. "Do you want this app to work like every other app in the world in the ways you've come to expect?" If peopl
5.
by moxie 6y ago
Right now if you re-install Signal on your device, you lose all your messages. That's already a very bad user experience, but imagine how much worse it would be if you lost your entire address book in that moment as well. Right now tha
6.
by moxie 7y ago
FWIW, there are a couple of things about Apple's and Google's systems that don't work for Signal: 1. There is no meaningful remote attestation. There's no way to verify that there are HSMs at the other side of the connec
7.
by moxie 7y ago
> As for Lyme disease: The actual infection can be treated with a standard course of antibiotics. The infection does not persist indefinitely, although some people experience long-lasting effects after the infection is gone. I don't
8.
by moxie 7y ago
> "Also the end of the story mentions there are no obvious monuments to the people who worked to help rescue people but there is one in the very city he was reporting from dedicated to the firefighters and others involved: https:&#
9.
by moxie 7y ago
"Only 1400 kilograms of uranium and graphite mixture would have needed to hit the water to set off a new explosion. Our experts studied the possibility and concluded that the explosion would have had a force of 3 to 5 megatons. Minsk..
10.
by moxie 7y ago
I think there's a lot of uncertainty in talking about Chernobyl, since most of the information published by the Soviet authorities was intentionally incorrect or misleading, designed to downplay the significance of the accident. One th
11.
by moxie 9y ago
Here's how WhatsApp group messaging works: membership is maintained by the server. Clients of a group retrieve membership from the server, and clients encrypt all messages they send e2e to all group members. If someone hacks the WhatsA
12.
by moxie 10y ago
> That defense, which happens to be the only defense, is turned off by default in WhatsApp. > You seem to argue they do so because it's bad UX to present such notification by default. That's - in my humble opinion - like
13.
by moxie 10y ago
> This allows WhatsApp to MITM. Whatapps can rekey both Alice and Bob, decrypt both their messages from that point onwards (incl unsent messages) and forward them re-encrypted with their real keys. The only notification might be that re
14.
by moxie 10y ago
"Various activist groups" setup their own SMS service? If all you want is for a few hundred people to be able to communicate, you don't need a federated protocol, you just need a VPN. It is much easier to use a centralized s
15.
by moxie 10y ago
> Secondly it's not possible because their is not a finish list of providers. By the way 1) everybody should-could be its own provider 2) everybody must use its own domain name DNS to make addresses like greeting@name. Just to be cl
16.
by moxie 10y ago
Can you provide specific historical examples where censorship of federated protocols was difficult or impossible for technical reasons ? I can't see how there is anything technically difficult about it. To the extent that services are
17.
by moxie 10y ago
> With XMPP and federated messaging servers they would have at least working infrastructure within their country. Why do you think this is true? I can't see how federation is an answer to censorship. They would simply censor access
18.
by moxie 10y ago
> Reading through the comments that are linked it looks like you mostly had technical concerns about the work. Is that correct? > Clearly the perception of your actions is different than you intend. In your comment here you make it
19.
by moxie 10y ago
> But "their own needs" are completely out of bounds for you, and it seems pretty clear that this isn't something that's going to be fixed in patches and code, so expecting them to come and fix it because you have an
20.
by moxie 10y ago
I'm repeating myself on many of these points, so I've cut and pasted some of my previous responses: > Signal uses servers controlled by OWS. Other organizations could conceivably operate their own servers because OWS open sourc
21.
by moxie 10y ago
> Say I run the server under my control, and I talk to other people on and off my server via XMPP. What is occuring is my laptop, phone & tablet are connecting back to my XMPP server, which then connects to those clients, thus not le
22.
by moxie 10y ago
Hmm, I'm not sure where you got these numbers, but none of them are correct. Ten hours of downtime a month ? We measure this pretty obsessively, and haven't had that much downtime in a three year period. I appreciate the se
23.
by moxie 10y ago
The code in question is written in Java, so the type of memory corruption vulnerabilities you're thinking about are not a possibility: https://github.com/WhisperSystems/Signal-Android/tree/master...
24.
by moxie 10y ago
I think these types of posts are also the inevitable result of people overestimating our organizational capacity based on whatever limited success Signal and Signal Protocol have had. It could be that the author imagines me sitting in a gl
25.
by moxie 10y ago
Wire does not use Signal Protocol, they used some of our code to create a protocol of their own devising that we do not recommend.
26.
by moxie 10y ago
> Moxie has threatened to shut LibreSignal down if they allow LibreSignal users to message normal Signal users, and refused to even discuss alternative solutions. Please cite this. To my knowledge I never threatened anything, and your co
27.
by moxie 10y ago
http://fortune.com/2016/08/29/clinton-campaign-signal/
28.
by moxie 10y ago
Wire does not use Signal Protocol. They use a protocol of their own devising that we do not recommend.
29.
by moxie 10y ago
Yes, Google has market leverage. However, when IE was Firefox's competitor, MS was in just as powerful of a position, and Firefox was a success. They were a success because they clearly had the better browser. These days, that's
30.
by moxie 10y ago
What always strikes me about these pleas is how familiar they sound. They're reminiscent of all the things we "should" -- eat better, exercise more, lower our carbon footprint -- and I suspect they all see just about the sam

More ›