Salta al contenuto principale


📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).

It’s also concerning. 1/

in reply to Meredith Whittaker

Concerning, bc it indicates that the extent of the concentration of power in the hands of a few hyperscalers is way less widely understood than I’d assumed. Which bodes poorly for our ability to craft reality-based strategies capable of contesting this concentration & solving the real problem. 2/
in reply to Meredith Whittaker

The question isn’t "why does Signal use AWS?" It’s to look at the infrastructural requirements of any global, real-time, mass comms platform and ask how it is that we got to a place where there’s no realistic alternative to AWS and the other hyperscalers. 3/

reshared this

in reply to Meredith Whittaker

Running a low-latency platform for instant comms capable of carrying millions of concurrent audio/video calls requires a pre-built, planet-spanning network of compute, storage and edge presence that requires constant maintenance, significant electricity and persistent attention and monitoring. 4/
in reply to Meredith Whittaker

Instant messaging demands near-zero latency. Voice and video in particular require complex global signaling & regional relays to manage jitter and packet loss. These are things that AWS, Azure, and GCP provide at global scale that, practically speaking, others (in the western context) don’t. 5/
in reply to Meredith Whittaker

This isn't ‘'renting a server.' It's leasing access to a whole sprawling, capital-intensive, technically-capable system that must be just as available in Cairo as in Capetown, just as functional in Bangkok as Berlin. Particularly given the high stakes use cases of many who rely on Signal. 6/
in reply to Meredith Whittaker

Such infrastructure costs billions and billions of dollars to provision and maintain, and it’s highly depreciable. In the case of the hyperscalers, the staggering cost is cross-subsidized by other businesses–themselves also massive platforms with significant lockin. 7/
in reply to Meredith Whittaker

Meaning that infrastructure like AWS is not something that Signal, or almost anyone else, could afford to just “spin up.” Which is why nearly everyone that manages a real-time service–from Signal, to X, to Palantir, to Mastodon–rely at least in part on services provisioned by these companies. 8/
in reply to Meredith Whittaker

But even if Signal had the billions needed to recreate AWS, it’s not just about money. The talent to run these systems is rare & concentrated. The expertise, the tooling, the playbooks, the very language of modern SRE came out of these hyperscalers, and is now synonymous with 'the cloud.' 9/
in reply to Meredith Whittaker

o, yes, Signal runs on AWS. It also runs on your phone, which runs on iOS (Apple) or Android (Google). And on Dekstop, via Windows (Microsoft). Each of these presents similar dependencies on large entrenched tech companies, and concomitant barriers and risks. 10/
in reply to Meredith Whittaker

In short, the problem here is not that Signal ‘chose’ to run on AWS. The problem is the concentration of power in the infrastructure space that means there isn’t really another choice: the entire stack, practically speaking, is owned by 3-4 players. 11/

reshared this

in reply to Meredith Whittaker

So, Signal does what we can to provide a service w integrity in the concentrated ecosystem we're working in. We protect your comms w end-to-end encryption, so that we can use AWS and others as a highway across which to send Signal data in ways that don’t let AWS, or anyone else, gain access. 12/
in reply to Meredith Whittaker

To conclude: my silver lining hope is that AWS going down can be a learning moment, in which the risks of concentrating the nervous system of our world in the hands of a few players become very clear. And that this can help us craft ways of undoing this concentration and creating real choice ❤️ 13/
in reply to :rebel: 🔜 #39C3

@yawnbox I don't think you have a clear understanding of what you're talking about, and it might be fun for you to look a bit more deeply into how TOR works and its dependencies.
in reply to Meredith Whittaker

With respect Meredith, i’m talking about decentralized protocols and their capability to not depend so heavily on the service providers you’re arguing for. Tor Project has shown how possible it is (i used to work there, and it’s spelled Tor not TOR).

I listened to Moxie’s aversions to decentralization for years. That’s what I keep seeing now, with posts like these. I also understand the value of huge cloud providers, I’ve worked for many companies who use them, and have worked for them, and I understand why you depend on them and how important that is to a high quality service. Thank you for all that you all do.

But what conversations does Signal Foundation actually have on the topics of resiliency through decentralization? How much money could you save by allowing the community to take on aspects of the network? How much resiliency and trust could be gained, without losing performance?

in reply to David Penfold :verified:

@davep @yawnbox Regarding Tor: instant messaging (if you stretch "instant" to cover several seconds which is acceptable in practice) have been successfully ran over Tor and other distributed settings.

Regarding video not relying on a centralized infra: Skype during its Kazaa-/pre-Microsoft- era and its "Super nodes" has been a widely successful example of a video calling software that doesn't rely that much on centralisation (but of course with a completely different security model)

in reply to DrYak

@davep @yawnbox (note: I am not saying that Signal is bad. Merely jumping in about centralisation. I actually appreciate Signal, e.g., unlike the above example of Skype, it is tolerating 3rd party open source clients, so people like me who neither run Android nor iOS on the smartphone can still communicate with friends).
in reply to Meredith Whittaker

The even worst part imo is that usually when a smaller player comes into play and they have LOTS of brains and rare talent and passion and love for what their doing, will either get lost because people's everyday life is soooo dependent on these evil corps. OR these corps. will buy them out... BUT that means that more effort needs to be put in decentralization, as way of life of sorts. As a stand. Of stop using one thing for everything and instead try to have more things that do ONE thing and do it well. Decentralization = more control from the person and less control from the big players. Centralization is the exact opposite... But it's easy... :/
in reply to Meredith Whittaker

I've been using #Signal from the very beginning (TextSecure times), and I've been advocating Signal a lot.

But the centralized architecture, instead of a federated decentralized approach is something I never liked. Also the focus on BigTech platforms (IOS, Android) is something I do not like. I'm using a #Librem5 #Linux phone, but there is no official primary client for Linux.

Still, I'm donating, but I would appreciate addressing centralism and #BigTech dependency.

#MobileLinux

in reply to Jan Vlug

@janvlug Linux mobile userspace APIs is almost non-existant: no standardized push notification, no app lifecycle, no background app policy, no clear sleep/standby/dose policy, no call/ring system, no modern mobile-like audio routing system, etc.

We absolutely need Mobile Linux to succeed but we first need a working modern userspace before we can ask anyone to make apps for it (especially apps as complex as Signal with call, notif, background activity, etc.)

coucouf ⏚ reshared this.

in reply to Meredith Whittaker

The problem is that signal is not running as a federated service. This makes you dependend on services like AWS and the like.

And there's another AWS/(any evil hosting service): As I understood #signal hashes phone numbers before uploading them to let accounts discover each other. The number space of phone numbers is not really big and having computing power and storage space at hand it shouldn't be too complicated to make a database to quickly access any phone number by its hash.

This information - using default signal settings - is exposed to super computing companies. This information allows to recreate the topology of the social network that is made of the millions of signal accounts.

in reply to Chris Vogel

@me You did indeed not completely understand. signal.org/blog/private-contac…
in reply to Meredith Whittaker

I get your points and can see your reasoning. The counter argument I would make (as I do for other tech, too, not just Signal) is that unless we actually spend our money with (currently) smaller providers in the space, they will never stand a chance to expand and offer viable alternatives. At least some part of our business decisions should pave the way towards a more resilient future. But that's just my opinion fwiw.
Questa voce è stata modificata (1 settimana fa)
in reply to Meredith Whittaker

Signal on desktop also runs on Linux, which sounds quite right from the first look, BUT Signal on desktop is just a remote control of the phone-installed Signal app!

So you are still bound to Apple and Google.

That's another bad decision. It relates to the bad decision of using the phone number as ID.

in reply to Meredith Whittaker

Agree - if you want to run your service centralized. Neither my Mastodon nor my Matrix-server need anything but my own self-hosting. Of course they won't handle billions of concurrent customers - but a few tens of thousands similar to mine will. Together.

I simply don't think Signal being centralized is a good thing. It's your choice, but alternatives do exist and those do not need hyperscalers.

in reply to Troed Sångberg

@troed I don't think you have a clear understanding of this space, but I hope you have a good time digging in and learning more.
in reply to Meredith Whittaker

Thanks for your condescending reply. I used to manage global SaaS within fintech with nodes in GCP, AWS and Azure and on multiple different continents.
in reply to Troed Sångberg

Those explanations about how something like Signal is not possible or pragmatic without AWS or the other big players felt like gaslighting . Going as far as suggesting "mastodon" (meaning actually the fediverse) also requires AWS is disingenuous at best and malicious at worst, specially considering the CEO was using the fediverse to communicate about the Signal outage as it was happening. Arguing that you need to rely on Android (Google), iOS (Apple) or Windows (MS) to run the client is straight lying as one can use the desktop version to run on Linux and requiring a mobile app to sign up is a choice Signal did, a problem of their own making. Yes I know there is a lot of nuance but the end result is the same: trust has been lost.
Questa voce è stata modificata (1 settimana fa)
in reply to fiery

@fiery @troed #AWS *is* necessary if you're trying to make a large-scale centralized system, no? There aren't a lot of alternatives to that when we're talking about the level of scale that #Signal operates at.
in reply to casey is remote

@fiery Not only aws is not required to build a large scale centralized system but Signal is also is not necessarily required to be centralized.
in reply to fiery

@fiery
Interesting. I'm not aware of how many #AWS competitors there are so maybe I'm wrong.

That said, I don't disagree with you that #Signal shouldn't be centralized, it's one of the reasons I don't think I've ever used it.

in reply to casey is remote

@fiery Aws is not doing magic. Your compute still have to run on physical machines and the ones they have are not special. They also do not have to sit on Bezo's datacenter for large scale systems to work. Now if you are talking about their distributed systems' architecture, now it is not about centralized systems anymore, is it? Cloud is just a magic word that means other people's computers.
in reply to casey is remote

There certainly are cloud competitors to AWS. How easy it would be to use them would depend on what services Signal uses in AWS. Some will have equivalents, some may not. AWS, being around for so long has a boatload of services and it’s not in their best interest to make them easily movable.

But I absolutely get why something like Signal would use a cloud provider. Could it be done entirely on-prem? Quite probably. However could they do it within a business model that would allow the scale of users to use it as they have today without charging significant fees to use it? I highly doubt it. This would hold true for anyone wanting to build a service like theirs that would operate on the their scale. The bandwidth and other infrastructure would be immense and super expensive to buy and maintain. The only folks able to provide that would be big telco, tech companies.

Could it be all decentralized ala the Fediverse? Sure and such services exist. But, much like the Fediverse, getting user adoption would be much more difficult and tour audience would be those tech savvy enough to use what’s already out there. I mean, for example, Matrix/Element exists. Quite secure, very decentralized. But it’s not for the general public.

in reply to midway

You are comparing "Cloud" (in this context actually meaning PaaS) to owning your own datacenter as if they were the only options possible, but there is a whole world of options and combinations of options that are not either of these two extremes. I keep getting surprised that so many people actually believe that owning your own datacenter and equipments is the only alternative to so-called "cloud" providers.
in reply to fiery

I didn't mean to put it that way. I mean peer-to-peer is certainly a thing. And we have systems that do that....and they are WAY too complex and cumbersome for the average user to use...see Matrix as a classic example. Quite secure, very decentralized, but not simple enough for most people to use. Heck, even here on the Fediverse, the user base is quite limited because of the decentralized nature is just too much for most folks to grasp..throw real privacy and zero trust encryption on top of it and your app will never take off.

Therefore, if you actually want users, you're going to have some amount of centralization. That means you need to run on something, either your own gear or someone else's. And at the scale that Signal wants to run, cloud makes sense not just for compute and services, but also the sheer amount of bandwidth needed to process the amount of data they want to send.

Can it be done a different way? Sure. Will those methods scale to the reach the average user? I seriously doubt it.

in reply to midway

Now you are talking about something else completely. You are making the point that centralization somehow improves UX. You'd have to substantiate that better.
in reply to fiery

Yeah, well the conversation has several branches.

Centralization simplifies how thing work in general, especially for end users. You have one place to go where you set up your account and work from single experience. There's a reason why every successful service our there has some level of centralization. It's just easy to use. Ease of use beings in more users which helps the service survive.

Decentralization has some great advantages. But with that comes complexity and with complexity comes a lack of adoption. The lack of adoption means that there's no money in it. And that's great if you're a hobbyist, but not if you're a company.

An easy example is social media. Look at all of the massive services. They are all centralized. Look at a decentralized system like the Fediverse. Yes, it's very decentralized, but the audience is very limited.

Now let's take this back to Signal which was the whole point of the thread. Yes, it has some centralized services. Those centralized services make the system work well enough that average internet users would actually use it. There are decentralized options out there. They work peer to peer so there's no need for things like cloud infrastructure or a big data center to run them. Matrix/Element comes to mind. Super secure, decentralized messaging. Very few people use it because it's just too complicated for the average or even above average user.

So if I'm Signal, a company that wants to build a more secure messaging app, I'm going to make some compromises in order to make it acceptable and palatable to a wide audience so I have a chance to make some money and keep my companhy afloat. Thus, something like AWS makes sense. I can get access to huge resources to handle any user load, but my costs scale in real time with my usage. This is sensible. But there are trade-offs. But i think for what Signal is trying to do, those trade-offs make sense.

in reply to midway

You are mixing many different concerns here. First, we got define better what we are talking about when you say "centralized". That can be many things. The user does not have to even see this to use a service. Case in point: facebook, twitter/x, tiktok and other are ALL decentralized services. In the sense that they are distributed systems split in many parts, running across many machines. How do I know that? Because no computer exists nowadays that could run them on a single machine. Yet users are kept blissfully unaware of that as they should. Signal is ridiculously small compared to those social media. There is no reason a messaging service like signal could not be the same and yet be decentralized internally. Even amazon itself is not internally a centralized system in any sense of the word. They are highly distributed internally and offer plenty of options for redundancy. And yet Signal was down when ONE REGION of aws was down. That kind of centralization serves no purpose and is just bad engineering. No one would be harsh at signal had they owned up to it and said, "yeah, that was bad, we need to do it better". But no, their leadership went on condescending everyone, telling that they do not understand the problem space. That was just bad. Mind you, signal is still my primary communicator and I still donate to them monthly, while I am still using it. But when a CEO earning upwards of 700k usd a year gives that kind of response to the public, that is making me reconsider. Trust has been lost, something is off.
Now another point is that non-centralized does not necessarily means peer-to-peer. One such highly successful example is email, which is federated. Yes, most users will just gravitate to some centralized offering like gmail or hotmail, but the system is still interoperable for folks or companies who want more control or even self host. We have options, based on public standards. In that sense even instagram is being more open than signal, in the sense that they now have threads which talk to the fediverse. Signal is openly against any such federation arrangement, thus reducing the power that users have over their own data. They do not even have good export options, arguing that would reduce security. Yet they require a mobile number to sign-up which in most places already doxx the user.
in reply to fiery

If you are defining a centralized service as one that runs in a single system, then this has ceased to be an adult conversation, especially here on the Fediverse.

I get only running in one region is a vulnerability. It could be bad engineering…it could also be because of cost. Resiliency isn’t free or necessarily cheap, especially for a company that relies on donations. It’s great that you donate to Signal but I assure you the vast majority of their traffic is sent and received by people who don’t.

I made the point about running in the cloud or on prem because that was part of the pro original post (at least as I remember it…it’s been a while). The email model is essentially peer to peer. It relies on lots of places agreeing on a standard to send messages. The issue with this is that to make that work requires dumbing down the standard and would likely break the goal of an all like signal. Email is not in any way secure. Quite the opposite in fact. Are there ways to make it more secure? Yes. But there is no agreed to standard to do so and thus this feature has not been widely adopted. The way email has gone is to become more and more centralized every day with a handful of companies providing email whose business models do not want secure email. The email market has decided that free is better than secure. The price of free is the provider reads your email to sell your information. I only went down this rabbit hole because Signal won’t want to adopt this model because doing so kills their entire reason to exist. Their compromise is that they handle and procrss the

in reply to Meredith Whittaker

nearly everyone that manages a real-time service–from Signal, to X, to Palantir, to Mastodon–rely at least in part on services provisioned by these companies


Mastodon doesn't, though?

There certainly will be servers hosted on AWS but when AWS went down, most Mastodon instances stayed up, and people were cracking jokes at more centralized platforms.

in reply to datum (n=1)

@datum Mastodon is distributed at the level of the protocol, not infrastructure. Sure, some people use a server in their closet, but most license hyperscaler infra to host their mastodon instance.

Meta note, we seem to be dealing with a confusion in what the term "distributed" means in this context.

in reply to Meredith Whittaker

What if, instead of running a global comms platform for millions of people that requires AWS level infrastructure, we run a bunch of small, local ones that all federate and interop with each other? 😍
in reply to Daniel Gultsch

@daniel Even _IF_ it were possible to create a black box version of "distributed Signal mesh node in a box" that you could run in your basement to help make Signal more tolerant - I mean with enough $ and willpower Im sure it could be done - there's still the question of: if you don't control physical access to the node, there's still potential for attack regardless of how much encryption and protection. Would you ever be able to trust it completely?
in reply to Third spruce tree on the left

@Third spruce tree on the left @Daniel Gultsch @Meredith Whittaker I'm quite sure that I have more physical access control to the xmpp server that I hope to have running in my office at home in a few weeks than to any AWS node, so that would already be an improvement.

also, if somebody is willing to break into my home to get access to the updates on how often the neighborhood cat has been fed, I want to congratulate them on their priorities.

unless it's the cat himself. in that case “get out, you're not allowed in this room, because it's not cat safe, and *how* did you even manage to get in?”

in reply to Third spruce tree on the left

@Third spruce tree on the left thankfully *that* particular failure mode can't happen (fanless SBC), but now I've spent too many minutes working on an hypothetical scenario where “hungry cat with hacker skills” is part of the thread model, and I am worrying for my own sanity just a bit :D
in reply to Elena ``of Valhalla''

@valhalla

I told my teenaged daughter having friends for a sleepover that they could have chatroulette unblocked if they could figure out how to unblock it (all they had to do was paperclip the wifi router) but they couldn't be arsed.

Are hungry cats more motivated to find technical hacks? News at 11.

Unknown parent

Richie McCoy aka Dr Deej
@debacle @dryak @davep @yawnbox There is a desktop version. You need a phone to use it though.
Unknown parent

Unknown parent

DrYak

@debacle @davep @yawnbox There's a list here:
github.com/exquo/signal-soft/w…

Gurk uses the same rust library as WhisperFish.

Also, the multi-protocol Pidgin has plugin for Signal.
(Then there's also a bridge for the Matrix protocol.)

Unknown parent

DrYak

@debacle @davep @yawnbox I am rather happy with it (though there are occasional hiccups -- my account got accidentally deleted, I need to re-create it). I only use it for messaging, I have no idea how far Rubdos got with the implementation of calls.

I would recommend if you happen to run SailfishOS on your phone and if you too are mostly interested in messaging.

Unknown parent

Nicoco
@debacle @dryak slidgnal bas been revived! No groups yet, but 1:1 basic and cool features work. At least that is what @alex says, I have zero signal contacts and haven't tested it much yet. ^^

Questo sito utilizza cookie per riconosce gli utenti loggati e quelli che tornano a visitare. Proseguendo la navigazione su questo sito, accetti l'utilizzo di questi cookie.