@Zergling_man @graf Plot twist.
Signal is actually secure.
Known CIA asset Tucker Carlson saying his messages were being read was more of the plot to scare people away from it.
> Reality: Only trust AES256+Blowfish over RFC2549
@istvan @Zergling_man @graf IMO this is somewhat correct. My guess is that Signal *is* secure, but that a 5-eyes member put OS-level malware on 'ol Tuck's phone.
That's far more likely (and would result in feds reading his messages) than somehow intercepting and decrypting Signal messages themselves.
@Zergling_man @istvan @graf Signal finally, years and years later, now has usernames, so I wouldn't be surprised if in a year or whatever from now, that you can use it without a phone entirely.
Criticism is valid though.
@eriner
Is there a point though? Double Ratchet is implemented in Matrix as well, but in addition to it, and unlike Signal, it's decentralized and you can self-host it, so there is lower probability that sever itself can get compromised.
@Zergling_man @istvan @graf
@eriner
There is no point in me selling you Matrix — all IMs suck, all of them! But I'd rather use the modern clasterfuck over infininte XML clasterfuck from 25+ years ago that is only used by other peeps on Fedi, who desolder cameras on ther phones, that never took off and never ever will because Nornirians can't even install it, let alone add you to their contacts without you doing it for them.
@Zergling_man @istvan @graf
@eriner
And of course I would choose it any day over a thing that requires phone number and other thing that also requires phone number, but in addition to it is a known KGB data collection and psyop tool. At least because I can host it myself on a ThinkPad from the early 2000s running in the back of my shed.
@Zergling_man @istvan @graf