58 points DeepLogin 2 hours ago 18 comments

throwaway89201 1 hour ago | parent

Someone in that thread notes that when you install the Signal APK from here [1] it "doesn’t get updates tho", but this isn't the case. Signal will update itself; you get a notification to update. Often earlier than the Play Store, probably due to its reputation to randomly delay updates.

[1] https://signal.org/android/apk/

_heimdall 53 minutes ago | parent

Well that's timely, and a bummer. I was just wondering about this yesterday, I use signal on my primary phone and Molly on a secondary phone.

Signal got an update yesterday and when I saw the notification I couldn't remember the last time Molly was updated...

jttnr 50 minutes ago | parent

TIL: The official Signal app can now use one account, shard over two devices.

This was my main reason to use Molly over Signal.

https://aboutsignal.com/news/signal-allows-iphones-to-be-lin...

elektor 30 minutes ago | parent

Wow, they have not done a good job advertising that when I needed that feature.

I’ve been using Beeper to keep using Signal on my older iPhone when I upgraded.

FreakyT 30 minutes ago | parent

That article only mentions iPhones, for which Molly was never an option anyway.

But, apparently Android is also supported: https://aboutsignal.com/news/signal-allows-android-phones-to...

So glad they finally added this!

jon128 47 minutes ago | parent

The incorporated 501c3 named Signal is, in IT terms, a vendor. Is it not?

The Signal client software is open source and some of the clients have reproducible builds. The Signal server software is open source, though has a history of being over a year out of date at some points. Other deployments of this server software for production use are rare.

Suppose you configured an instance of the Signal server software and others you know ran also a somewhat modified Signal client that could access that instance of the Signal server software.

But the centralized namespace of the hosted Signal service hosted by the incorporated 501c3 named Signal would not be accessible through that server instance now would it.

And, as dictated by the incorporated vendor of the centralized namespace, and other reasons, in practice, this client would have to run as a separate piece of software. "Another app".

This is vendor lock-in.

The service hosted by the 501c3 named Signal seems widely open yet is a permissioned namespace. A physical location tracking number aka phone number or a credit/debit card is required to access the namespace. This is for slaves. The profane.

  Open Signal on your phone to keep your account active
This vendor is abusive.

And, I don't think this is what Moxie wanted.

Signal 501c3 is a centralized service. XMPP and Matrix are decentralized/federated. SimpleX is distributed.

commandersaki 39 minutes ago | parent

<insert laughing emoji>

jon128 3 minutes ago | parent

Hylic detected.

  https://en.wikipedia.org/wiki/Gnosticism#Other_concepts

ada-h00k 37 minutes ago | parent

Sometimes I get the feeling that Signal hates users who aren't total normies. Unified Push, which works flawlessly on Molly, could easily be implemented in the regular client. Just as they could easily offer a Google free version for F-Droid or simply for people who want nothing to do with Google. But they just refuse. Just like it took years for nicknames to be introduced, and registering without a phone number has only recently become possible and only through the Google Play Store.

raphinou 30 minutes ago | parent

I also would like it to have stable supported libraries. But this doesn't seem to be a focus. It's a pitty, we have a Foss solution and it's hard to integrate with it....

dist-epoch 17 minutes ago | parent

2 years ago when I got a new phone, I had to re-register in both WhatsApp and Signal.

Both send you a code over SMS. I hate giving apps SMS access, so I refuse SMS intercept permission when an app asks for it, and instead I manually enter the received code in the app.

This was possible in WhatsApp, but was not possible in Signal. It won't allow you. You must give it SMS access to read the code. So much for privacy/security/... Only app I use which didn't allow me to manually enter the SMS code.

cocoto 12 minutes ago | parent

I’m pretty sure it’s for security reasons, it allows the app to ensure the code comes from a correct Signal phone number and not from a third party actor. It’s hand holding yes but it’s a trade off in favor of non-technical users.

dist-epoch 7 minutes ago | parent

Somehow all the other apps, including bank apps, do not seem to consider this necessary.

Signal always has excuses, "we can't add usernames because we don't know how to make them secure"