- cross-posted to:
- [email protected]
- cross-posted to:
- [email protected]
You must log in or register to comment.
I support the cause in general but: Signal is not federated at all. It may seem like a decent alternative to WhatsApp but is it really? It still falls under the same US jurisdiction. Let’s say the US gov starts agressively prosecuting dissidents and certain minorities (they already do): can and should we still use signal in this case? I don’t think so. Sadly i can’t name a much better alternative. Maybe matrix. But it has other issues.
Signal is open source. They absolutely do always comply with US warrants. They have never provided any information to US law enforcement, because they can’t access it. They literally have no way of accessing the information contained inside the texts. The most they could provide is metadata, but they currently aren’t collecting that. I also think if they started, it would not work well for their user base. You can see all their requests for information, and the responses they gave, here: https://signal.org/bigbrother/
Jurisdiction is not that important. Even if it was in Switzerland it’d have to comply with international law enforcement and warrants. The key is that sure Signal is obliged to give out whatever data it has, but the point is that it doesn’t have much useful data to give. It’s the same as Mullvad, and a far smarter approach than “lol we just gonna ignore the warrant huhuhu look at us we host somewhere in Shitzerfuck” (oh btw “We are in X country which is not in N eyes” is just marketing).
Oh and btw the same goes for instances of the fediverse (which are ran by volunteers you need to trust), and if they don’t comply and the US government really wants to break into them they probably will find a way. Doesn’t even need some complicated backdoors or anything it just needs to find an OPSEC slip-up, do some social engineering, arrest someone or at worst find a bug to exploit, and I can guarantee that unless you have some serious security wizards running your instance you’re not beating the FBI there and if the FBI is really persistent and focused on you for some reason then the wizards won’t be enough you need state actors.
If your threat model actually includes the US government (aka you’re actually in danger and not some paranoia or just-in-case situation, be realistic with yourself) and there’s credible threats you may be targeted by it or other governments then you’re probably going to be using tor, briar, all that jazz, and wouldn’t be on lemmy. If you’re just some guy who just needs to message your family and shit Signal is perfectly fine, I can tell you that unless you’re a serious threat to the government they won’t waste resources cracking down ways to capture you via signal or whatever you use that is even somewhat secure (so no telegram, no WhatsApp, no messenger, etc), even if you’re a minority or activist, if not because you’re not important enough then because they have other easier ways to do it.
Edit: oh and btw Signal was banned in Ruzzia (a country way more authoritarian than the US currently is) because the FSB couldn’t crack it so that goes to show it is pretty secure.
(oh btw “We are in X country which is not in N eyes” is just marketing)
Why do you say this? There are real data-sharing agreements between the Eyes.
Doesn’t even need some complicated backdoors or anything it just needs to find an OPSEC slip-up
This already happened with kolektiva, unfortunately, but from what I hear they’ve since strengthened their security.
- There’s data-sharing agreements with more than just the N eyes countries
- If there’s an international warrant for that data the company is obliged to comply regardless
The only countries in which n° 2 doesn’t apply for the US are countries you really don’t want your data in either.
In short, however: if a government really wants your data it will find a way to get it no matter where you store that data, so the best thing is to simply not store that data at all, Mullvad and Signal don’t do that.
We should stop being naive. Immersing ourselves as a society into facebook and twitter significantly contributed to the shit situation we are in now. Going to Signal seems like a short term solution. We should have some idea where to go on the long term.
Facebook and twitter are not the same as signal. The signal protocol is a free open source project, that WhatsApp, Signal, and many other use. It secures the data so that whatever servers they are stored on, the company storing it does not know what the texts say. Facebook and Twitter are all about getting as much data as possible. Even though WhatsApp uses the signal protocol, they still collect all metadata with the texts (which is really what they want anyway). Moving to open source project is absolutely the long term goal to get out of this shit hole.
Let’s say the US gov starts agressively prosecuting dissidents and certain minorities (they already do): can and should we still use signal in this case?
Definitely no. Russian government already is aggressively prosecuting dissidents and you can’t join Signal there. I don’t know whether it’s due to sanctions or if the government is blocking 2FA SMS messages. In either case, it is impossible to join without a phone number confirmation. At least I wasn’t able to. I don’t see the USA being that far off with all the recent TikTok drama.
you can’t join Signal there. I don’t know whether it’s due to sanctions or if the government is blocking 2FA SMS messages. In either case, it is impossible to join without a phone number confirmation.
What do you mean? You need a phone number to join Signal in any country.
And that’s the problem. The whole privacy thing goes out the window because it relies on an insecure and state-controlled method for authentication. What’s the use of it if it can be killed off in any country at a whim of its, or USA’s government?
I find youtube to be the hardest one on this list
Youtube is the only one on this list that I use and I only use it with an ad blocker.
Agreed as peertube is great the creators i enjoy to watch dont upload there
PeerTube appears to be completely devoid of content
no, there’s tons of furries, like the rest of the fediverse. >.>
It feels pretty quiet here. At least going by active posts. They’re often the same for a while. New is a bit better. Unless it’s my expectations that are wrong?
Take a look at the 2 pinned posts in this community: https://lemmy.wtf/c/peertube
That’s the problem with the fediverse in general. It’s a lovely concept, but it’s hard to sell people on something that has 10% (if we’re being generous) of the content they’re used to.
has anyone tried Friendica? is it devoid of people?
That’s ironic
The UI is fucking awful and way too complex, so it’s difficult to get anything done. I’ve tried two different instances and found them both to be unusable.
It’s a shame because Friendica is way more powerful than most Fediverse platforms – they leverage way more of ActivityHub’s potential, such as a system for calendars + events. But the UI needs to get sorted out before it’s ready for mass adoption.
How is signal considered part of the fediverse?
It should be something like SimpleX
This is such a beautiful guide!
For the avid readers out there, bookwyrm is a fantastic alternative to goodreads.
Yes it’s excellent! Also noting for those that aren’t aware: Goodreads is owned by Amazon.
Folks should also check out neodb.social . it’s good reads, letterboxd, and steam reviews all in one.
I’ve been looking for something to track my physical book, music, and game collections. An instance of this might work nicely. Thanks!
Signal isn’t federated [1][2][3.1]; it’s decentralized [1][2][3.2]. Though, for all practical purposes, I would generally argue that it’s centralized.
References
- Signal-Server. signalapp. Github. Published: 2025-01-31T15:34:14.000Z. Accessed: 2025-02-01T09:24Z. https://github.com/signalapp/Signal-Server.
- This is the source code for the server that Signal uses.
- “Signal (software)”. Wikipedia. Published: 2025-01-06T09:34Z. Accessed: 2025-02-1T09:30Z. https://en.wikipedia.org/wiki/Signal_(software).
- ¶“Architecture”. ¶“Servers”.
Signal relies on centralized servers that are maintained by Signal Messenger. In addition to routing Signal’s messages, the servers also facilitate the discovery of contacts who are also registered Signal users and the automatic exchange of users’ public keys. […]
- ¶“Architecture”. ¶“Servers”.
- “Reflections: The ecosystem is moving”. moxie0. Signal Blog. Published: 2016-05-10. Accessed: 2025-02-01T09:40Z. https://signal.org/blog/the-ecosystem-is-moving/.
- ¶5. to ¶“Stuck in time”. ¶3-6
One of the controversial things we did with Signal early on was to build it as an unfederated service. Nothing about any of the protocols we’ve developed requires centralization; it’s entirely possible to build a federated Signal Protocol-based messenger, but I no longer believe that it is possible to build a competitive federated messenger at all. […] [interoperable protocols] [have] taken us pretty far, but it’s undeniable that once you federate your protocol, it becomes very difficult to make changes. And right now, at the application level, things that stand still don’t fare very well in a world where the ecosystem is moving. […] Early on, I thought we’d federate Signal once its velocity had subsided. Now I realize that things will probably never slow down, and if anything the velocity of the entire landscape seems to be steadily increasing.
- ¶“Stuck in time”. “Federation and control”. ¶6.
An open source infrastructure for a centralized network now provides almost the same level of control as federated protocols, without giving up the ability to adapt. If a centralized provider with an open source infrastructure ever makes horrible changes, those that disagree have the software they need to run their own alternative instead. It may not be as beautiful as federation, but at this point it seems that it will have to do.
- ¶5. to ¶“Stuck in time”. ¶3-6
Don’t let perfect be the enemy of good
Yeah. I love Signal but it doesn’t belong in that list. Dansup (creator of loops and pixelfed) is apparently working on “Sup” that will be a decentralized alternative to whatsapp.
To me this person sounds like they have too many big projects at once. I wish them success tho
but I no longer believe that it is possible to build a competitive federated messenger at all.
The fact that we have a telephone system that works with separate providers contradicts this sentiment. If I want to pick up the phone and talk to my cousin’s puppy in New Zealand, I can do that without creating an account on his provider’s service.
I don’t understand why we’ve forgotten this as a society. Yes, it was difficult to upgrade the phone systems over the past century, but it’s worth it in my opinion. I really wish we’d start seeing government regulation that says “you should be able to talk to someone on a service without having to create an account on said service.” I thought the DMA would do this, but sadly, Whatsapp still requires an account to talk to people using that service. Very disappointing.
How is the puppy?
As for interoperability between services… Monetization of surveillance data. The social media companies are Ad companies, and they make their money surveilling people and selling access. It’s harder to build an accurate model of a person when only pieces of data is available, and they need to have more data then the other Ad tech companies they’re competing with.
Yeah, Moxie has openly shot down the idea of adding federation to Signal, and I’ve never heard them claim Signal was decentralized.
Matrix is federated, distributed, and decentralized.
XMPP is federated and decentralized.
Matrix is […] distributed […].
It is? How so?
Matrix servers keep a copy of any remote room an account on the server has joined, and it’s possible to recreate a room from the copies held on different servers. There are more details I don’t remember, but at a high level that’s how it’s distributed.
Storing messages of remote rooms in addition to local rooms is why people complain about the storage requirements of Matrix servers. They don’t realize it’s distributed.
Interesting — I hadn’t considered it that way.
- Signal-Server. signalapp. Github. Published: 2025-01-31T15:34:14.000Z. Accessed: 2025-02-01T09:24Z. https://github.com/signalapp/Signal-Server.
Youtube is probably the one that you can’t “Just Switch To Fediverse”
Youtube content is mainly by creators. If they won’t leave, there will be no transition. And unlike reddit posts, you can’t just reupload. Because they will copyright strike you and take it down. Also, videos take up a lot more space than just text and some low-res memes like reddit-type sites.
reddit is essentially a bunch of strangers talking to people, moving froms stranger Group A to stranger Group B is very easy to do. The reddit > Lemmy transition is probably one of the easiest. You’re just joining a new group of strangers.
For everything else, your contacts will also need to switch.
For Mastodon, the people you follow will also need to switch. This is even harder than getting your friends to switch.
Hear me out.
Creators should be hosting peer tubes. And they should host exclusively their own content. Fans of their can subscribe to whatever systems they want to pay and support.
For creators, it’s a backup for when YouTube the project inevitably fails. For fans as well. But it’s also a backup of their content.
Signal is centralized, loops is closed source and not accepting new users.
Loops will be open sourced later they say.
Is Loops open source? It will be! We plan on open sourcing the platform after it reaches a stable and easy to maintain state.
So Matrix it is?
I was told that unless you self host, matrix is less secure because it leaks more metadata. Something to consider
Damm, didn’t know that, good to know
it’s not even true information, the new tech stack is zero trust
What does this mean?
Zero trust means there’s no trust assumed on the protocol - I.e. it distrusts all actors and the protocol takes steps to work in that trustless environment. I don’t know how that applies specifically to matrix.
So the guy above the guy avobe me was supposedly wrong?
the new cryptographic protocol protects metadata, like signal. the servers know nothing about any encrypted chats
So the guy above the guy avobe me was wrong?
Unfortunately, the switch from YouTube to PeerTube has not worked for me so far. I can’t find a decent instance (not full of right-wing/conspiracy content) with interesting stuff that also allows me to make an account.
Have a look here for potential instances: https://lemmy.wtf/post/15816115 and also check these links out for channels to follow: https://lemmy.wtf/post/15810205 / https://peertube.wtf/home
Yes finding the right instance on peertube is a nightmare — and also the general lack of quality content, or subtitling, which makes it as good as useless for deaf people like me.
I keep seeing this type stuff but neither peertube or friendica are genuine replacements at this point, mastodon is weaksauce compared to akkoma or a misskey fork, and loops is alpha software. also yes signal is centralized but it just works and has contact discovery so it owns matrix and xmpp when compared to whatsapp. basically none of this stuff is truly ready
[Signal] has contact discovery so it owns matrix and xmpp when compared to whatsapp
Can you please elaborate? Idk what this means
matrix and xmpp just don’t have the intuitive onboarding that signal has when coming from whatsapp
It means that, because signal mandates you to use your phone as ID, all your phone contacts that have signal are immediately signal contacts. Matrix, XMPP, SimpleX, etc. can’t really do that. That’s by choice, to preserve privacy, but it does create a friction point when migrating.
As software, PeerTube is great and there’s actually plenty of content to consume if you can find it. The more content creators we can get to use PeerTube, the more appealing PeerTube will also become.
Check this link out, if looking for content: https://peertube.wtf/
“If you can find it” … that’s the crucial point I suppose … but without a discovery algorithm, interesting creators, and a VAST content archive, it can hardly be called an “alternative” for YouTube.
When I was looking into it I found the best use case was to use it as a self-hosted video archive to replace/extend my Vimeo. At least at that point, all instances that were remotely interesting were not taking any users, and the generic ones seemed to be very far away from what I’m doing content-wise.
And I guess as long as that’s the case, and you have no ways to monetize content nor any significant reach due to the federated fragmentation, I don’t think it’s an interesting software/federated platform for creators …
Check this link out: https://lemmy.wtf/post/15816115 for servers and have a look at https://peertube.wtf/ for some of the content available on PeerTube.
If you are a content creator, you need to take the first step. Viewers will come after you, not before.
I’m running my own instance, and typically post my stuff on mastodon, so I guess I have made the first step?
It’s a bit of a Catch-22 I suppose … low numbers of viewers makes it less attractive for creators, and fewer interesting creators make it less attractive for viewers.
Taking into account the other aspects that make it less attractive for viewers (fragmentation and inconvenience … having to dig through “Find the right instance for you” tutorials, no matter how well curated, can be a bit of a turn-off compared to just going to a central point and find what you’re looking for), I don’t have that much hope that it’ll reach a critical mass of both viewers and creators to catapult Peertube into large-scale relevance … as sad as I am about saying that.
Cool. What’s your instance?
And yes, it is a catch-22 or a “chicken before the egg” issue, but I’m confident we will see even more content creators on PeerTube in the future.
(sorry for the late reply)
https://see.ellipsenpark.de/ --> again, single-user, single-topic, more of an archive really
I was already on Mastodon by just having a Vivaldi (the chromium browser) account, and it’s just lovely I’ve spent most of the day setting up lemmy, even though I joined feddit.dk 2 years ago, it’s only just now I’m taking it seriously.
And, while not related to the fediverse per se, I switched to linux a year ago.
The only service that’s hard to drop/switch away from is Youtube imo.Hi, I think too many people are focusing too much on the type of software included in this chart. I don’t think the goal of the person that created the chart was to create the ultimate guide to move to the Fediverse or FOSS apps with all the options available for them. I believe it prioritizes simplicity, and it’s clearly directed towards people unaware that these alternatives exist.
Most people I know don’t even know what the Fediverse is, and I think this initiative is for them.
I know that debating which FOSS/Fedi apps are the best is a big matter of concern for people that are already aware of the problems some platform have. But focusing too much on this debate not only creates more division among supporters of FOSS/Fedi, but it is also drawing attention from the main point: Bringing more people to the Fediverse.
Thank you. Please jump in faster with a tldr of this on other posts like this.
instead of switching ive mostly just been ditching entirely. I need less time interacting with internet people.
literally the only thing on this list im still using is facebook messenger, for my work colleagues. and youtube. everything else ive migrated (reddit-lemmy), or abandoned and torched
More recently I’ve felt like there’s issues with being completely disconnected from any sort of critical mass. If I wanted to join a protest in my local city, I have doubts any of the fringe social networks could organize that. I can do my part to try to get more people on there.
It’s part of why I joined BlueSky over X. It’s more popular, and issues be what they are, that counts for a lot.
It’s funny how things work out.
I’ve spent years checking social media multiple times per day, and due to current (and not so current) events, I initially just deleted twitter. I tried mastodon, but it was a complete echo chamber. Twitter on the other hand was 25% bots and 50% porn, so I just deleted it. Turns out I didn’t miss it.
I recently did the same with Instagram, Facebook, TikTok and Snapchat. Guess what, not missing those either.
Facebook messenger is tough to get rid of though. I have kids that attend after school activities, and there aren’t really any easy fixes. I doubt I can successfully persuade 100+ people to migrate to signal just because of my political crusade.
It’s not being helped by the fact that ~75% of the people here use iPhones, so most communication not going through messenger goes through iMessage. Last I checked I knew a total of 4 people on signal, despite having 50+ people i regularly communicate with over messenger or iMessage.
I doubt I can successfully persuade 100+ people to migrate to signal just because of my political crusade.
Don’t know till you try! And if you’re playing the long game, you don’t need to convince 100+ people – the more individuals that join, the easier it will become to convince everyone else to make the switch too.
In this specific case, like my kids soccer or swimming team, I would need to convince 15 childrens parents, so 30 people (or more) to switch.
On top of that, the soccer club has more teams, and since soccer practice is scheduled by the club, the club itself would need to switch their ways of working, and that’s where it gets tough.
Facebook, for better or for worse, offers a free platform with a built in blog, instant messenger, calendar, reminders, and an easy way to send messages to all relevant people.
Signal only solves one or two of those problems, meaning they would have to find alternatives for the rest, and I for one don’t miss the time when everybody used some variant of a shared calendar (ie Google calendar) to schedule, and you’d be subscribe to 10+ calendars with notifications going off left and right.
Nor do I miss every club having its own poorly maintained Wordpress site, with ensuing loss of credentials because the admin used “hunter2” as their password.
These people are not tech nerds, they’re enthusiasts for whatever sport they’re teaching our kids, and we should make their jobs as easy as possible.
