logoalt Hacker News

tialaramex • today at 1:22 PM • 11 replies • view on HN

Don't Stand Out.

When you say "Each user can choose a different notification service" you aren't enhancing privacy you are standing out.

When you say "Each group of users can have their own servers" you aren't enhancing privacy you are standing out.

So yeah, it's only for "total normies" in the sense that if you insist on standing out from those "total normies" that's a problem.

Signal is taking advantage of the inherent camouflage of crowds, once you insist on standing out that's gone and you can't get it back.


Replies

ada-h00k • today at 1:32 PM

Using the preinstalled Google services effectively turns your smartphone into spyware. In the standard Android that comes preinstalled on most smartphones, Google services run with system privileges and can collect all kinds of data including location data. If Signal exclusively supports this, it reinforces dependence on Google and discourages people from using versions of Android that don’t include Google’s spyware.

➕ show 1 reply
cyphar • today at 3:36 PM

This argument doesn't make sense, Signal is fundamentally not an anonymity tool. It's a privacy tool.

They intentionally store very little data about their users but their "mailbox" model explicitly means that the server (or an attacker) can figure out who is talking to whom. And that's fine! Signal isn't trying to be an anonymity network, so while stuff like sealed sender are nice features it's important to remember that anonymity breaks are explicitly not part of the Signal threat model.

"Don't stand out" only makes sense as advice for anonymity tools to avoid bifurcating the anonymity set -- it doesn't make much sense when you're taking about a service which links your account to your phone number and thus every server request is explicitly identifying you.

➕ show 1 reply
wolvoleo • today at 1:30 PM

> When you say "Each group of users can have their own servers" you aren't enhancing privacy you are standing out.

You're also hedging against mandated government backdoors.

A single organisation like signal can easily compelled to add a backdoor (or leave the territory) like the EU is trying to do. Going after thousands of servers individually is a whole different problem.

➕ show 1 reply
Timshel • today at 1:32 PM

The reverse is true, if more app support unified push then those using it will stand out less.

hgoel • today at 3:06 PM

Stand out from what? Are you seriously arguing that the only things keeping Signal from being banned are that it somehow camouflages itself?

➕ show 1 reply
pkal • today at 2:21 PM

There just is a contention between software freedom and privacy that people don't want to acknowledge sometimes. Signal is firmly on one side of the divide, and their software is open source because it is the convention to have the source public and auditable, not because they are interested in user freedom and respect.

➕ show 1 reply
donutdonot • today at 1:31 PM

Not sure I follow or understand your argument. There's so many things with which eg Telegram stands out, but it still appeals to normies.

tancop • today at 1:29 PM

They could still implement these things in the app and put them behind a switch for users who care about independence more than one specific type of anonymity. Explain the tradeoffs on the settings screen.

The only valid reason to be against an optional feature is the maintenance burden, I don't think it's too much here but I also can't speak for the Signal team.

jon128 • today at 4:40 PM

Anyone who has worked with SQL databases and graph databases can't buy this goofy "camouflage" idea.

If you don't know how computers work, yeah it sounds great. But those who do know how computers work see it for what it really is: a bucket of shit.

cookiengineer • today at 5:43 PM

[dead]

IMSTANDINGOUTNO • today at 1:34 PM

[dead]