📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •reshared this
c. just c. reshared this.
Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •reshared this
kappazeta, c. just c. e Lauma Pret 🕸️ reshared this.
Meredith Whittaker
in reply to Meredith Whittaker • • •Meredith Whittaker
in reply to Meredith Whittaker • • •:rebel: 🔜 #39C3
in reply to Meredith Whittaker • • •Anban Govender reshared this.
Meredith Whittaker
in reply to :rebel: 🔜 #39C3 • • •:rebel: 🔜 #39C3
in reply to Meredith Whittaker • • •With respect Meredith, i’m talking about decentralized protocols and their capability to not depend so heavily on the service providers you’re arguing for. Tor Project has shown how possible it is (i used to work there, and it’s spelled Tor not TOR).
I listened to Moxie’s aversions to decentralization for years. That’s what I keep seeing now, with posts like these. I also understand the value of huge cloud providers, I’ve worked for many companies who use them, and have worked for them, and I understand why you depend on them and how important that is to a high quality service. Thank you for all that you all do.
But what conversations does Signal Foundation actually have on the topics of resiliency through decentralization? How much money could you save by allowing the community to take on aspects of the network? How much resiliency and trust could be gained, without losing performance?
David Penfold :verified:
in reply to :rebel: 🔜 #39C3 • • •DrYak
in reply to David Penfold :verified: • • •@davep @yawnbox Regarding Tor: instant messaging (if you stretch "instant" to cover several seconds which is acceptable in practice) have been successfully ran over Tor and other distributed settings.
Regarding video not relying on a centralized infra: Skype during its Kazaa-/pre-Microsoft- era and its "Super nodes" has been a widely successful example of a video calling software that doesn't rely that much on centralisation (but of course with a completely different security model)
DrYak
in reply to DrYak • • •Jeroen van Tol 🍋 🐸🔻
in reply to Meredith Whittaker • • •Dimitris Nakos, MSc
in reply to Meredith Whittaker • • •khm
in reply to Meredith Whittaker • • •Jan Vlug
in reply to Meredith Whittaker • • •I've been using #Signal from the very beginning (TextSecure times), and I've been advocating Signal a lot.
But the centralized architecture, instead of a federated decentralized approach is something I never liked. Also the focus on BigTech platforms (IOS, Android) is something I do not like. I'm using a #Librem5 #Linux phone, but there is no official primary client for Linux.
Still, I'm donating, but I would appreciate addressing centralism and #BigTech dependency.
#MobileLinux
flossifatal598
in reply to Jan Vlug • • •@janvlug Linux mobile userspace APIs is almost non-existant: no standardized push notification, no app lifecycle, no background app policy, no clear sleep/standby/dose policy, no call/ring system, no modern mobile-like audio routing system, etc.
We absolutely need Mobile Linux to succeed but we first need a working modern userspace before we can ask anyone to make apps for it (especially apps as complex as Signal with call, notif, background activity, etc.)
coucouf ⏚ reshared this.
Chris Vogel
in reply to Meredith Whittaker • • •The problem is that signal is not running as a federated service. This makes you dependend on services like AWS and the like.
And there's another AWS/(any evil hosting service): As I understood #signal hashes phone numbers before uploading them to let accounts discover each other. The number space of phone numbers is not really big and having computing power and storage space at hand it shouldn't be too complicated to make a database to quickly access any phone number by its hash.
This information - using default signal settings - is exposed to super computing companies. This information allows to recreate the topology of the social network that is made of the millions of signal accounts.
Sebastian
in reply to Chris Vogel • • •Technology preview: Private contact discovery for Signal
Signal MessengereLearningTechie
in reply to Meredith Whittaker • • •Bernd Paysan R.I.P Natenom 🕯️
in reply to Meredith Whittaker • • •Signal on desktop also runs on Linux, which sounds quite right from the first look, BUT Signal on desktop is just a remote control of the phone-installed Signal app!
So you are still bound to Apple and Google.
That's another bad decision. It relates to the bad decision of using the phone number as ID.
Troed Sångberg
in reply to Meredith Whittaker • • •Agree - if you want to run your service centralized. Neither my Mastodon nor my Matrix-server need anything but my own self-hosting. Of course they won't handle billions of concurrent customers - but a few tens of thousands similar to mine will. Together.
I simply don't think Signal being centralized is a good thing. It's your choice, but alternatives do exist and those do not need hyperscalers.
Meredith Whittaker
in reply to Troed Sångberg • • •Troed Sångberg
in reply to Meredith Whittaker • • •fiery
in reply to Troed Sångberg • • •casey is remote
in reply to fiery • • •fiery
in reply to casey is remote • • •casey is remote
in reply to fiery • • •@fiery
Interesting. I'm not aware of how many #AWS competitors there are so maybe I'm wrong.
That said, I don't disagree with you that #Signal shouldn't be centralized, it's one of the reasons I don't think I've ever used it.
fiery
in reply to casey is remote • • •midway
in reply to casey is remote • • •There certainly are cloud competitors to AWS. How easy it would be to use them would depend on what services Signal uses in AWS. Some will have equivalents, some may not. AWS, being around for so long has a boatload of services and it’s not in their best interest to make them easily movable.
But I absolutely get why something like Signal would use a cloud provider. Could it be done entirely on-prem? Quite probably. However could they do it within a business model that would allow the scale of users to use it as they have today without charging significant fees to use it? I highly doubt it. This would hold true for anyone wanting to build a service like theirs that would operate on the their scale. The bandwidth and other infrastructure would be immense and super expensive to buy and maintain. The only folks able to provide that would be big telco, tech companies.
Could it be all decentralized ala the Fediverse? Sure and such services exist. But, much like the Fediverse, getting user adoption would be much more difficult and tour audience would be those tech savvy enough to use what’s already out there. I mean, for example, Matrix/Element exists. Quite secure, very decentralized. But it’s not for the general public.
fiery
in reply to midway • • •midway
in reply to fiery • • •I didn't mean to put it that way. I mean peer-to-peer is certainly a thing. And we have systems that do that....and they are WAY too complex and cumbersome for the average user to use...see Matrix as a classic example. Quite secure, very decentralized, but not simple enough for most people to use. Heck, even here on the Fediverse, the user base is quite limited because of the decentralized nature is just too much for most folks to grasp..throw real privacy and zero trust encryption on top of it and your app will never take off.
Therefore, if you actually want users, you're going to have some amount of centralization. That means you need to run on something, either your own gear or someone else's. And at the scale that Signal wants to run, cloud makes sense not just for compute and services, but also the sheer amount of bandwidth needed to process the amount of data they want to send.
Can it be done a different way? Sure. Will those methods scale to the reach the average user? I seriously doubt it.
fiery
in reply to midway • • •midway
in reply to fiery • • •Yeah, well the conversation has several branches.
Centralization simplifies how thing work in general, especially for end users. You have one place to go where you set up your account and work from single experience. There's a reason why every successful service our there has some level of centralization. It's just easy to use. Ease of use beings in more users which helps the service survive.
Decentralization has some great advantages. But with that comes complexity and with complexity comes a lack of adoption. The lack of adoption means that there's no money in it. And that's great if you're a hobbyist, but not if you're a company.
An easy example is social media. Look at all of the massive services. They are all centralized. Look at a decentralized system like the Fediverse. Yes, it's very decentralized, but the audience is very limited.
Now let's take this back to Signal which was the whole point of the thread. Yes, it has some centralized services. Those centralized services make the system work well enough that average internet users would actually use it. There are decentralized options out there. They work peer to peer so there's no need for things like cloud infrastructure or a big data center to run them. Matrix/Element comes to mind. Super secure, decentralized messaging. Very few people use it because it's just too complicated for the average or even above average user.
So if I'm Signal, a company that wants to build a more secure messaging app, I'm going to make some compromises in order to make it acceptable and palatable to a wide audience so I have a chance to make some money and keep my companhy afloat. Thus, something like AWS makes sense. I can get access to huge resources to handle any user load, but my costs scale in real time with my usage. This is sensible. But there are trade-offs. But i think for what Signal is trying to do, those trade-offs make sense.
fiery
in reply to midway • • •Now another point is that non-centralized does not necessarily means peer-to-peer. One such highly successful example is email, which is federated. Yes, most users will just gravitate to some centralized offering like gmail or hotmail, but the system is still interoperable for folks or companies who want more control or even self host. We have options, based on public standards. In that sense even instagram is being more open than signal, in the sense that they now have threads which talk to the fediverse. Signal is openly against any such federation arrangement, thus reducing the power that users have over their own data. They do not even have good export options, arguing that would reduce security. Yet they require a mobile number to sign-up which in most places already doxx the user.
midway
in reply to fiery • • •If you are defining a centralized service as one that runs in a single system, then this has ceased to be an adult conversation, especially here on the Fediverse.
I get only running in one region is a vulnerability. It could be bad engineering…it could also be because of cost. Resiliency isn’t free or necessarily cheap, especially for a company that relies on donations. It’s great that you donate to Signal but I assure you the vast majority of their traffic is sent and received by people who don’t.
I made the point about running in the cloud or on prem because that was part of the pro original post (at least as I remember it…it’s been a while). The email model is essentially peer to peer. It relies on lots of places agreeing on a standard to send messages. The issue with this is that to make that work requires dumbing down the standard and would likely break the goal of an all like signal. Email is not in any way secure. Quite the opposite in fact. Are there ways to make it more secure? Yes. But there is no agreed to standard to do so and thus this feature has not been widely adopted. The way email has gone is to become more and more centralized every day with a handful of companies providing email whose business models do not want secure email. The email market has decided that free is better than secure. The price of free is the provider reads your email to sell your information. I only went down this rabbit hole because Signal won’t want to adopt this model because doing so kills their entire reason to exist. Their compromise is that they handle and procrss the
fiery
in reply to midway • • •» Beyond distributed and decentralized: what is a federated network?
networkcultures.orgdatum (n=1)
in reply to Meredith Whittaker • • •Mastodon doesn't, though?
There certainly will be servers hosted on AWS but when AWS went down, most Mastodon instances stayed up, and people were cracking jokes at more centralized platforms.
Meredith Whittaker
in reply to datum (n=1) • • •@datum Mastodon is distributed at the level of the protocol, not infrastructure. Sure, some people use a server in their closet, but most license hyperscaler infra to host their mastodon instance.
Meta note, we seem to be dealing with a confusion in what the term "distributed" means in this context.
Daniel Gultsch
in reply to Meredith Whittaker • • •Elena ``of Valhalla'' likes this.
Third spruce tree on the left
in reply to Daniel Gultsch • • •Elena ``of Valhalla''
in reply to Third spruce tree on the left • •@Third spruce tree on the left @Daniel Gultsch @Meredith Whittaker I'm quite sure that I have more physical access control to the xmpp server that I hope to have running in my office at home in a few weeks than to any AWS node, so that would already be an improvement.
also, if somebody is willing to break into my home to get access to the updates on how often the neighborhood cat has been fed, I want to congratulate them on their priorities.
unless it's the cat himself. in that case “get out, you're not allowed in this room, because it's not cat safe, and *how* did you even manage to get in?”
Daniel Gultsch likes this.
Third spruce tree on the left
in reply to Elena ``of Valhalla'' • • •@valhalla @daniel
<cat hair clogs server fan filter; crash> MENDOZA!!!!! <shakes fist>
Elena ``of Valhalla''
in reply to Third spruce tree on the left • •Third spruce tree on the left
in reply to Elena ``of Valhalla'' • • •@valhalla
I told my teenaged daughter having friends for a sleepover that they could have chatroulette unblocked if they could figure out how to unblock it (all they had to do was paperclip the wifi router) but they couldn't be arsed.
Are hungry cats more motivated to find technical hacks? News at 11.
Elena ``of Valhalla'' likes this.
Richie McCoy aka Dr Deej
Unknown parent • • •DrYak
Unknown parent • • •@debacle @davep @yawnbox The Signal client I use is specific to #SailfishOS , it's WhisperFish:
openrepos.net/content/rubdos/w…
(I don't know about other Linux mobile distributions).
Whisperfish | OpenRepos.net — Community Repository System
openrepos.netDrYak
Unknown parent • • •@debacle @davep @yawnbox There's a list here:
github.com/exquo/signal-soft/w…
Gurk uses the same rust library as WhisperFish.
Also, the multi-protocol Pidgin has plugin for Signal.
(Then there's also a bridge for the Matrix protocol.)
Software list
GitHubRichie McCoy aka Dr Deej
Unknown parent • • •DrYak
Unknown parent • • •@debacle @davep @yawnbox I am rather happy with it (though there are occasional hiccups -- my account got accidentally deleted, I need to re-create it). I only use it for messaging, I have no idea how far Rubdos got with the implementation of calls.
I would recommend if you happen to run SailfishOS on your phone and if you too are mostly interested in messaging.
Nicoco
Unknown parent • • •