- cross-posted to:
- technology@lemmy.world
- cross-posted to:
- technology@lemmy.world
The title indicates that Signal was cooperating with Ukraine in the past and decided to stop doing so. But that seems misleading if they were never able to cooperate in the first place?!
Edit: without more info on Signal’s previous responses, this article is not saying much.
“The encrypted messaging app Signal has stopped responding to requests from Ukrainian law enforcement regarding Russian cyberthreats, a Ukrainian official claimed”
People need to learn how E2EE (End to End Encryption) works. It’s not that Signal refuses to cooperate with Ukraine, it’s that they can’t from technical reasons of E2EE.
Signal can’t read or intercept messages, at best they can log IPs and that’s about it. Which are useless if both parties are using VPN or other IP obfuscation methods.
It’s same with ProtonMail for example. The most they can log are IPs, metadata and subjects that are visible to them. And that’s it. They can’t access or read messages unless they create backoors on login page that access users decrypted data locally. That’s why creepy governments are so annoyed by encryption (looking at you UK you creeps as well as Australia and also Germany from recebt news and I didn’t even mention ones like Russia…).
This seems to be the only source for this information, while on the other hand I’m seeing this;
Wired: A Signal Update Fends Off a Phishing Technique Used in Russian Espionage
Google warns that hackers tied to Russia are tricking Ukrainian soldiers with fake QR codes for Signal group invites that let spies steal their messages. Signal has pushed out new safeguards.
What exactly is Signal supposed to do here?
They’re not supposed to be able to help in any way, how would they determine if a specific user is using Signal for phishing or whatever without decrypting their chats?
Being European would make zero difference here, unless the European service is backdoored.
Yay, signal is great because they do everything in their power to not only not spy on you, but not be able to. But boo, they are bad, because they won’t spy on other people for us!
That’s not how that works
Obviously Telegram is out, sadly Signal is also not exactly shining … where else is there to go though?
Like another commenter here said, what did Signal do wrong in this case? We don’t want a third party to be able to see our encrypted messages, or to know who it is who is using the service. Which is desirable when I’m using it, but undesirable when an aggressor is using it. Unfortunately you can’t have one without the other.
Matrix and Threema come to my mind.
Do people have success bringing their families and friends to Matrix? The Signal UI is closer to Whatsapp, which usually made the switch easier
Just gotta get rid of all your friends and family and then you can use any IM service. Very convenient.
I hear the latency is hard to beat too if you only talk to yourself.
I have brought my family to Threema and Signal (when Corona started). But Matrix would not work for them I fear.
I love the idea of Threema, but the reason I love it is also precisely why it’s an extremely hard sell for casuals. Self-management of keys.
It’s also not open source. Sure, the clients are, but the back-end isn’t, and that arguably the most important piece.