Hacker News new | ask | show | jobs
by mildmotive 1200 days ago
This is why people who argue that Signal should use usernames and passwords rather than phone numbers for authentication really don’t understand how important UX is for privacy.
1 comments

I mean, the opposite is also true?

People use Snapchat routinely for privacy not merely because of the hallmark feature wherein it (only supposedly, of course, as this is so easily defeated) helps you control images you send: it is so that they don't have to give their phone number to the guy they just met at the bar and are unsure they can trust, as giving out their phone number means people can trivially stalk you as having a phone number is essentially game over for privacy of everything except the content of the messages you are sending.

Using phone numbers means it is also prohibitively difficult / expensive for people to maintain multiple identities, which I will claim most people do these days (as younger generations are actually deeper and deeper into understanding the privacy tradeoff!!), whether to have a "friendsta", a "shitposting account", or to simply isolate circles. The people most in need of privacy thereby can't use Signal as it would publicly tie together all of their normally-separated personas (unless, at least, they have the money to buy and maintain multiple phones... which, of course, almost no one can).

And like... it doesn't even make sense for really serious cases like political protesters and dissidents! Your biggest actually-realistic issue--certainly at the local level (which includes most of the anarchists and extreme leftists I've met)--isn't going to be an international subpoena on Telegram or whatever: it is going to be an undercover cop getting into your online chat channel (maybe by taking a phone off someone who they arrest), who can now tie everyone's identity together--including people who aren't active in person (and so will never be caught by a cop at the venue)--without any serious effort using the phone numbers in the group (which even includes a list of the people who aren't actively posting anymore).

So yeah, sorry, but no: that Signal is requiring phone numbers for people to communicate privately is them building a UX that actively undermines actual privacy in a way even normal non-technical users are smart enough to realize isn't useful for them, and that they not only don't see it but then decide to spend all of their time throwing down against companies like WhatsApp--which use their protocol!!--instead of declaring that battle won and moving on to fight Snapchat and Telegram, isn't just incompetence... it is a travesty.

Let's put it this way: can you ever imagine a college student who decides to make the difficult decision to go into online sex work for a few months (which is a situation which already really sucks, btw; like: don't get me wrong here... society is fucked in every direction on this issue) being able to use Signal? There is a GOOD reason why these people--who absolutely are clinging to the shreds of their privacy way more than I ever have in my entire life to date--are using services like Snapchat and Telegram (or, if they are willing to make the tradeoff on getting some viral or even algorithmic discovery, Twitter, Instagram, and TikTok) and simply DO NOT use Signal.

And don't forget that Signal requires an iOS/Android primary device which limits accessibility for folks that may not want to participate in the tracking brick with a screen and be without a smart phone, or can only afford a feature phone, or want to support FOSS with a Linux phone.
> folks that may not want to participate in the tracking brick with a screen

Which is completely irrelevant because a typical circle of friends, even among techies, will have one such person at most, who will be mostly isolated anyways.