• 0 Posts
  • 65 Comments
Joined 3 years ago
cake
Cake day: January 20th, 2022

help-circle







  • MerchantsOfMisery@lemmy.mltoLemmy Shitpost@lemmy.worldOil
    link
    fedilink
    arrow-up
    10
    arrow-down
    1
    ·
    edit-2
    6 months ago

    Gay people can’t be misogynist? Also this isn’t about ethics, it’s about BS marketing pushing Canadian oil as more ethical than Saudi oil-- from an industry that only cares about this because… they sell Canadian oil (that I’ll add is considerably more expensive to extract and gas prices would skyrocket if Canada relied solely on domestically produced oil).







  • I think the distinction here is that if your phone provider, WhatsApp, Signal or mail carrier is informed that someone is engaging in illegal activity using their service, these entities would comply and give the information they have on you-- be it a lot like SMS or a little like Signal (phone number, registration date).

    In the case of Telegram, they’ve been informed countless times that specific individuals are engaging in blatantly illegal activity and unlike the previously mentioned entities, Telegram is refusing to comply with any legal requests.

    I believe that’s the situation but if I’m wrong, by all means correct me because this is a very interesting subject.







  • How significant is it that the server code is open-source or not? It’s possible for Signal to publish their server code while running completely different software on their servers. The point of the client is being open source and audited on a regular basis by the community, which is why it doesn’t make sense to trust the server-side software.

    The entire point is that we don’t have to trust the sever at all. The client is open source and regularly audited by the community. As long as the client stays fully open source, everything’s fine. Also, the closed source dependencies are part of a spam reduction effort which IMO is well worth it. Prior to this, Signal had a spam problem and the client itself remains fully open source.

    Signal could have very well not even told people that they added a closed source dependency on Google to its servers and just lied by publishing fake server code that omits the closed source dependency., but instead they were very transparent about the spam problem. In terms of they “why?” regarding the closed source dependencies, their argument is that making it open source would almost immediately result in all anti-spam measures being thwarted. Frankly I’m inclined to agree and again, as long as the client is fully open source and regularly audited, the server code is irrelevant to user privacy/security.

    https://community.signalusers.org/t/spam-scam-on-signal/26665

    https://signal.org/blog/keeping-spam-off-signal/