Signal also checked with US government sources about the alleged flaw, which cropped up over the weekend, but says those 'we spoke to have no info suggesting this is a valid claim.'
  • Possibly linux@lemmy.zipEnglish
    21·
    1 year ago

    Its surprising to me that people are so quick to switch from signal. Even if it had a flaw, it still would be better than sms

  • Tetsuo@jlai.luEnglish
    20·
    1 year ago

    Meh too bad Signal shot itself in the foot by removing SMS support.

    I still think it was a very bad decision that will lead to the use of the app to decrease over time.

    At least it definitely decreased my use of it.

    I understand it’s a hassle to maintain this feature but still was probably worth it for user acceptance and spread to less technical users.

    • bugEnglish
      16·
      1 year ago

      It’s not about being a hassle to maintain, it’s about users thinking they were sending secure messages when they weren’t. The simplest explanation is that Signal is a secure messenger, so the app shouldn’t let you send insecure messages. I’m sure it lost them a few users but they’re not trying to gain maximum market share like for-profit orgs try to.

      • skuzz@discuss.tchncs.deEnglish
        4·
        1 year ago

        Also, in Google’s attempt to push RCS, they’re narrowing what application are allowed to use the SMS lib. They already partnered with Samsung so Samsung would removed RCS support and ostensibly deprecated their own Messages app for Google’s.

        Google’s long-game is to only have one SMS app on Android, their own, much like the way they’re closing off the rest of the Android ecosystem slowly from every other vector.

        Trying to support SMS on Signal long-term would just be an exercise in futility.

      • Tetsuo@jlai.luEnglish
        3·
        1 year ago

        It wouldn’t have been complicated to add a warning for SMS messages.

        The simplest explanation is that Signal is a secure messenger, so the app shouldn’t let you send insecure messages.

        Well that’s the reason I think it will become an app dedicated to a few elitist users. If an app lets me do unsecure things after numerous warnings and popups it should be fine.

        That’s how you make thing secure. You convince people afraid of security/complexity to use Signal and hope one day there is more than 1% of their contacts that could handle secure messaging.

        a few users but they’re not trying to gain maximum market share

        Are you saying they don’t want their messaging app to be popular?

        If your purpose is to secure as many people communication then this will never work by targeting only the most technical users…

    • KISSmyOS@lemmy.worldEnglish
      16·
      1 year ago

      Many phones with Google Messenging apps reply to SMS with RCS by default, which Signal can’t support because it’s proprietary.
      So Signal users didn’t receive replies to SMS they sent.
      Using Signal for SMS also gave users a false sense of security, thinking SMS sent from the app would be encrypted, despite an in-app warning.
      Finally, users kept blaming Signal for bugs in their provider’s faulty SMS implementation and gave the app bad reviews for something the devs have no control over.

    • hypertext@feddit.deEnglish
      3·
      1 year ago

      sms Integration was the reason i wasn’t using it for a long time and then always made sure this was turned off because it was soo confusing for me and everyone i tried to get to signal

        • hypertext@feddit.deEnglish
          2·
          1 year ago

          it was actively prompting to enable the feature during or shortly after setup which could be easily confused for being part of the process and most people i know didn’t actively read it, activated it and then where wondering why they get messages from X (sms) suddenly in signal, or assuming people are on signal, because it suggested regular contacts as well (which would be unencrypted sms)

    • Turing spider@lemm.eeEnglish
      1·
      1 year ago

      According to the rumors, the zero-day vulnerability can leverage Signal’s ability to preview a shared link to launch the attack. “To close the vulnerability, have everyone go to setting under your profile in signal> chats> deselect ‘generate link preview,’” Mike Saylor, CEO at Blackswan Cybersecurity, wrote on LinkedIn. "Also make sure your signal app is up to date.”