alt Hacker NewsMolly: An Improved Signal App
Comments
> Contains no proprietary blobs, unlike Signal
What "proprietary blobs" does Signal have?
I'll also just add: it's probably not a good idea to use any modifications to an E2EE messenger unless you are comfortable with those privacy/security guarantees possibly being violated by the 3rd party code.
The only exception to this would be if I really trusted the goals of the 3rd party, like Graphene.
This app's killer feature for me is that it's actually available on F-Droid, unlike its upstream.
Happy user for many years now, thanks for the support!
> multi-device
Can someone explain, is this different from adding (up to 5) devices to your Signal account? Are these devices all "primary" or something?
i use it only because it happens to have a convenient 'supply trust chain' on GrapheneOS: (built-in) App Store -> Accrescent[0] -> Molly (seems to ship the 'FOSS' version)
i don't use any of the enhancements, but it does receive notifications over the websocket it keeps open in the background vs only waking up on an FCM push notification like the regular app
i wonder if the supply chain risk of having a second entity (that signs the apks!) involved is really worth it to anyone... hope signal can be published on Accrescent or similar someday :p
What about the server portion? that's the thing I would like to have forked / open source.
> Protects database
What database?
This page is clearly written for developers that are already familiar with it.
From this I can already predict this project is going nowhere.
https://github.com/mollyim/mollyim-android/blob/285650e38613...
I'm pretty unconvinced that this is a sane or useful thing to do.
What is the point of this? Just use the regular signal app. It may be more safe, but are the developers trustworthy enough?
Extra privacy features and named after UK slang for MDMA, hrm.
Can't wait to see how the lawsuit goes. Moxie is infamously protective of Signal.
[dead]
I've used Molly for over a year. Overnight it lost the device registration and will not contact the servers to re-register. The backup feature also does not work which left me dead in the water for several days with no fix. I switched back to signal and had to start a new database. It was a disaster. YMMV