this post was submitted on 09 Jan 2026
530 points (99.3% liked)

Europe

8907 readers
1700 users here now

News and information from Europe ๐Ÿ‡ช๐Ÿ‡บ

(Current banner: La Mancha, Spain. Feel free to post submissions for banner images.)

Rules (2024-08-30)

  1. This is an English-language community. Comments should be in English. Posts can link to non-English news sources when providing a full-text translation in the post description. Automated translations are fine, as long as they don't overly distort the content.
  2. No links to misinformation or commercial advertising. When you post outdated/historic articles, add the year of publication to the post title. Infographics must include a source and a year of creation; if possible, also provide a link to the source.
  3. Be kind to each other, and argue in good faith. Don't post direct insults nor disrespectful and condescending comments. Don't troll nor incite hatred. Don't look for novel argumentation strategies at Wikipedia's List of fallacies.
  4. No bigotry, sexism, racism, antisemitism, islamophobia, dehumanization of minorities, or glorification of National Socialism. We follow German law; don't question the statehood of Israel.
  5. Be the signal, not the noise: Strive to post insightful comments. Add "/s" when you're being sarcastic (and don't use it to break rule no. 3).
  6. If you link to paywalled information, please provide also a link to a freely available archived version. Alternatively, try to find a different source.
  7. Light-hearted content, memes, and posts about your European everyday belong in other communities.
  8. Don't evade bans. If we notice ban evasion, that will result in a permanent ban for all the accounts we can associate with you.
  9. No posts linking to speculative reporting about ongoing events with unclear backgrounds. Please wait at least 12 hours. (E.g., do not post breathless reporting on an ongoing terror attack.)
  10. Always provide context with posts: Don't post uncontextualized images or videos, and don't start discussions without giving some context first.

(This list may get expanded as necessary.)

Posts that link to the following sources will be removed

Unless they're the only sources, please also avoid The Sun, Daily Mail, any "thinktank" type organization, and non-Lemmy social media (incl. Substack). Don't link to Twitter directly, instead use xcancel.com. For Reddit, use old:reddit:com

(Lists may get expanded as necessary.)

Ban lengths, etc.

We will use some leeway to decide whether to remove a comment.

If need be, there are also bans: 3 days for lighter offenses, 7 or 14 days for bigger offenses, and permanent bans for people who don't show any willingness to participate productively. If we think the ban reason is obvious, we may not specifically write to you.

If you want to protest a removal or ban, feel free to write privately to the primary mod account @EuroMod@feddit.org

founded 2 years ago
MODERATORS
 

Granted, the part

The globally recommended app by privacy and security experts, Signal, is now being downloaded massively and tops the Danish Google Play Store

is a little ironic, but you gotta push this winning tide and then work from that.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] poVoq@slrpnk.net 15 points 2 weeks ago (3 children)

Like one of the main things Signal is really terrible at given that it is based in the US and hosted on AWS servers ๐Ÿคฆ

[โ€“] VisionScout@lemmy.wtf 13 points 2 weeks ago* (last edited 2 weeks ago) (3 children)

Besides being hosted in the AWS servers, there's no way to check if what's running there is the same as the published code. That's why i don't use signal.

When the signal foundation is losing money every year, i can just wonder what will happen when the money runs out. Even the good guys need to eat.

Or what will happen when trump will decide to seize the AWS servers running the signal application server.

[โ€“] devfuuu@lemmy.world 12 points 2 weeks ago (1 children)

You don't need to care about the server code since the secure bits and encryption that matters is all on the client side and verifiable.

[โ€“] VisionScout@lemmy.wtf 1 points 2 weeks ago (2 children)

as in phone number, IP and timestamps? If I were worried about that I wouldn't have a phone in the first place but if private messaging (content is private) I think signal works fine

[โ€“] devfuuu@lemmy.world 4 points 2 weeks ago (1 children)

If you care about it then just use Signal since it's the one with least amount of metadata fying around. A big central server with many normies using it also ensures that it's very hard to correlate traffic.

[โ€“] VisionScout@lemmy.wtf 1 points 2 weeks ago

If you care about it then just use Signal

No, because of:

When the signal foundation is losing money every year, i can just wonder what will happen when the money runs out. Even the good guys need to eat.

I have seen this film so many times....

[โ€“] Vincent@feddit.nl 9 points 2 weeks ago

It shouldn't matter because you can verify that your data is encrypted and thus not accessible to the server, but also, IIUC, they use secure enclaves so that you can verify that their server is running the published source code.

[โ€“] mjr@infosec.pub 4 points 2 weeks ago (1 children)

when trump will decide to seize the AWS servers running the signal application server.

How do we know he hasn't already?

[โ€“] poVoq@slrpnk.net 9 points 2 weeks ago

No need to size them. AWS is deeply embedded into the intelligence apparatus of the NSA as one of their prioritized suppliers.

[โ€“] copacetic@discuss.tchncs.de 10 points 2 weeks ago

I believe the fact that Signal is hosted on Apple or Google clients is worse than its server host. (I still use and recommend it though)

Convincing people to use an open Android build is much harder than installing another messenger.

[โ€“] fxdave@lemmy.ml 1 points 2 weeks ago (32 children)

It's e2e encrypted. Although, as I noticed, the key is just a short pin, unless you use password, but the recipient might not use it and your messages are just as secure as your recipient.

[โ€“] rumschlumpel@feddit.org 21 points 2 weeks ago

The PIN isn't actually the encryption key, it's just a display lock for the local client. But if whoever wants to read your messages has physical access to your phone and already bypassed the normal android lockscreen, you're fucked anyway.

[โ€“] Dionysus@leminal.space 10 points 2 weeks ago (12 children)

The other party is always the weakest link.

But also signal's pins are a little more complicated than that, but you're right, switch to a passphrase.

Plus side, even if signal themselves edited the secure enclave, the world would need a new client pushed and probably notice something was off.

The way signal's encryption works is really an art in paranoia.

load more comments (12 replies)
[โ€“] Ricaz@lemmy.dbzer0.com 3 points 2 weeks ago* (last edited 2 weeks ago)

Facebook Messenger also claims to be end-to-end encrypted... There's literally no way of knowing if they can decrypt your messages.

The only way to know is to host it yourself and preferably use post-quantum secure encryption.

load more comments (29 replies)