Hacker News new | ask | show | jobs
by toomuchtodo 1601 days ago
These are not requirements for most messaging app users. I just want secure messaging. I don’t care if it’s open or interoperable. WhatsApp if it was run by a non profit.
4 comments

Most messaging app users don't really care about encryption either. Most (or at least a large minority) probably wouldn't mind if their messages were used to 'deliver ads more suitable for you'.

It doesn't mean these aren't important issues. Until Signal drops the phone number requirement (nothing beats that for efficient user tracking), allows desktop use without requiring a smartphone anywhere in the process, open sources their server code, and allows for third party clients in a reasonable way; I agree with dfkajglag: not yet an ally of user freedom.

> Until Signal drops the phone number requirement (nothing beats that for efficient user tracking), allows desktop use without requiring a smartphone anywhere in the process

I could handle the closed server for enabling me to use IM to talk to people. But these two points are what make it a non-starter for me.

The phone number requirement is the only thing making Signal remotely close to usable for the wider public. Similarly, non-phone messaging is niche in the extreme. Unusable software is not an ally of user freedom.

The actual problem with Signal is that they took US State Department funding. That doesn't mean it's an op necessarily, but suspicious nonetheless.

Why? If someone wants to use a phone number for their identifier, fine. But make it optional. If I join Signal with another alias (free-form string perhaps) then they could just add me via that. Not really harder than using my phone number.
> Why? If someone wants to use a phone number for their identifier, fine. But make it optional

Network effects.

If you’re only findable via custom handle versus the phone number your network already has, you’ve reduced the network’s value to your contacts. Put another way, if I join a messaging service and it says two of my contacts are on it (but many more may be), that’s close to a non-starter.

I'm fine with people not finding me automatically. If Signal wants to keep the low-resistance method of bulk-checking your contact's phone numbers, fine. Just give me the choice of joining without it.
> fine with people not finding me automatically

That’s a private gain at the network’s cost. For a challenger, their decision to bar that albeit limited form of free-riding is perfectly rational. For a dominant network, I am much more sympathetic to the call for anonymity.

And insane spam follows.
Why would you add a spammer to your contacts in Signal?
People can request to write you without being in your contacts. I have received several spam messages this week in this way. Imagine how much more with a lower barrier to entry
If it's optional, then there is more than one way to identify users. For a non-technical user, that means they have to make a choice and understand that choice, as opposed to just always using a phone number.

And everyone with a phone has a phone number.

Even if it's not most users, it still benefits the other people.

Why should everyone be forced to give away their phone number?

Why should everyone be forced to use the same app including it's limitations?

Why should everyone be forced to make a contract with the same vendor?

It could well be that it's not a requirement, because people don't think about it or take it as given.

Imagine Email or phones would work the same way Signal works (with respect to the above concepts).

Is non profit a requirement for most messaging app users?

You are free to not use the product if it and it's roadmap doesn't meet your needs. Lots of messaging options to choose from.
Unfortunately, you can't simply choose. Messaging apps that don't interoperate inherently create forces to use their app if you have contacts you want to reach on that app
"One in four people struggle to keep up with friends because they are using too many apps"

https://www.dailymail.co.uk/sciencetech/article-10451559/One...

TLDR: people are just not aware of their requirements

That's why I simply use whatsapp.
Technically it is not very secure. It leaks the most interesting stuff (metadata). People think that only message content matters.
What metadata is it leaking? Any link?
Everything they can possibly get with the app. Only message content is E2EE.

https://www.whatsapp.com/legal/privacy-policy

https://faq.whatsapp.com/general/security-and-privacy/end-to...

Didn't know leaking meta data was a requirement for most of the people ;-)
The most people don’t understand their own requirements. For example before Apple’s privacy features, Facebook (Meta) could try to guess the message contents with certain probablity based on other app usage. (Facebook trackers on different apps and cross-app tracking)
What is exactly what I am trying to say, since the comment up the chain states that e.g. interoperability isnt a requirement of most users