This is a most excellent place for technology news and articles.
Ya know, Signal has been audited multiple times. It's OSS. IT sec elite has looked at it and says it's sound. If anything is plausible, it would be your device spying on you rather than Signal.
What's weird tho is how people think this has anything do with messaging or data privacy. This is about Telegram being used as a public platform. They can't force Durov to decrypt anything, nor do they need to, because they already know your groups...
Idiots who before didn't bother to learn how to tell insecure platforms at that. In other words - those who only started caring about security when being sold it.
Any billionaire shouldn't be. Any billionaire who believes in and lives an "ascetic" lifestyle should live an ascetic lifestyle in a prison cell. Such a heightened contradiction, hoarding wealth and asceticism.
“A story shared by Jack Dorsey, the founder of Twitter, uncovered that the current leaders of Signal, an allegedly ‘secure’ messaging app, are activists used by the US state department for regime change abroad,” Durov wrote on his own Telegram channel.
In fact, the folks running Signal — notably Moxie Marlinspike and Meredith Whittaker — have a long history of effective security & privacy activism. Whittaker was one of the organizers of the Google Walkouts, one of the more effective pieces of tech worker activism in recent history. And Moxie has bumped heads with the US intelligence community more than once, and famously with the Saudis too.
Signal's hostility to 3rd party clients, and their refusal to publish on F-Droid is a massive red flag. I will not be using until they start following common sense.
Why will they not use F-Droid?
They won't directly support it because in their view the Google Play process is a more secure way of verifying they supplied the binaries than is possible of f-droid. If reproducible builds were possible maybe there could be some mechanism to verify a given binary is built from a given commit of the source tree.
Doesn't Google play store also modify and build the binary themselves to "generate and deliver APKs that are optimized for each device configuration, providing users with more efficient apps"?
https://support.google.com/googleplay/android-developer/answer/9859152#apk
