Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The big issue with Signal at the moment, is that it doesn't work on AOSP.

You can't use it without installing closed-source Google Apps (Play Services for GCM at minimum), and means you agree to hand over your phone metadata to Google (per the OP's top-thread). Moxie has stated he is open to consider high quality PR's to add Websocket functionality. (Removing close-source binary blobs would be a prerequisite to distributing on anything other than Google Play to though, which Moxie's also said isn't on the roadmap - I assume primarily because of resources).

In the meantime, Conversations.IM has OMEMO and Vector.IM has Olm/MegOlm.

There's not a lot of good voice options. Vector.IM's just added WebRTC, which is meant to be DTLS secured. CSipSimple does ZRTP, but it hasn't been updated in a long time.

None of the apps mentioned above has been audited and scrutinised to the extent Signal has.

If you really need privacy & security, CopperheadOS is the only Android distro AFAIAA that fits the bill at the moment.



Thanks for the tips on other apps and the Android distro. Much appreciated. Far as Signal issue, I did find this:

https://www.reddit.com/r/gnu/comments/4cd451/libresignal_sig...

Perhaps some more volunteers putting effort in could remedy the situation.


You're welcome. Unfortunately, LibreSignal was shut down due to: https://github.com/LibreSignal/LibreSignal/issues/37#issueco....

I wouldn't pin too much hope on having a high quality PR written and integrated back to Signal soon. It doesn't look like a top priority for them. OWS also like the telemetry that Play gives them for diagnostics and have stated they won't be looking at FDroid unless someone can replace that.


Thanks for the link. That conversation was a bit disturbing as I read on. Least Moxie is allowing the code to be used.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: