• Telorand@reddthat.com
    link
    fedilink
    arrow-up
    34
    ·
    7 days ago

    Yawn. Signal is still the easiest option to setup and perfectly fine opsec for the majority of people. For a centralized service, it is both open source and has a long history of malicious compliance with court orders. On top of that, it’s maintained by a nonprofit foundation, the best possible steward for a centralized service.

    If you’re an activist or engaged in activism, use SimpleX or something similar. If you’re just trying to chat with your aunt and don’t want prying eyes seeing what you chat about, Signal is sufficient.

    • sem@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      6
      ·
      6 days ago

      What’s wrong with using signal as an activist? Lots of folks use it.

      Or are you saying that activists may be targeted by governments using attacks that target signal’s ui?

      • Telorand@reddthat.com
        link
        fedilink
        arrow-up
        3
        ·
        6 days ago

        I’m saying that if who you talk to matters for your threat model just as much as what you say, you should pick a platform that’s more anonymous. Signal knows the IP addresses of where your messages go, and that might be enough to uncover who is talking to whom. Certain governments might find that enough cause to abuse someone they don’t like.

        Signal says that you can use a VPN to hide that information even from them, but IMO, it’s better if nobody has it in the first place, if it can be avoided.