150
Molly - a better signal
(molly.im)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 17 Sep 2023
150 points (82.9% liked)
Privacy
32177 readers
346 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
That's what Session is
Which is actually on fdroid, unlike Signal who explicitly refuses to support degoogled ecosystems
Weird as I get signal from f-droid.
from what repo
moxie specifically made a statement that he refuses to support fdroid, it's not in the fdroid repo
https://github.com/signalapp/Signal-Android/issues/127
don't post misinfo
It's still there. You said nothing about a specific repository. That's not "missinfo". How about you calm your rhetoric.
because it's not in the fdroid or IzzyOnDroid repo... so explain
I showed you the creator of signal explicitly saying he refuses to support fdroid
Signal-FOSS is on the TwinHelix F-Droid repository https://fdroid.twinhelix.com/fdroid/repo/?fingerprint=7B03B0232209B21B10A30A63897D3C6BCA4F58FE29BC3477E8E3D8CF8E304028
Signal is on the CalyxOS F-Droid repository https://github.com/CalyxOS/calyx-fdroid-repo
Signal-Foss has been made redundant and has stopped development for years. They added push notifications on degoogled phones, but Signal added that themselves.
The CalyxOS repository is a smaller repo only preinstalled on CalyxOS phones and it's really rarely added outside of Calyx phones. So I'm going to take a guess you're running CalyxOS to have that on your fdroid. Which I love the CalyxOS project btw, I've used them for a number of years and did a few commits to the project.
To be fair both are small repositories, yes, but I managed to find them both when looking for a way to install Signal via F-Droid. And no, I'm not running CalyxOS, but a different degoogled ROM :)
I might be wrong, but TwinHelix's Signal-FOSS seems to still be active, the latest update I found on their F-Droid repository and their GitHub is from yesterday: https://github.com/tw-hx/Signal-Android/releases/tag/v6.32.5.0-FOSS
But anyway, I just wanted to share these 2 sources since I saw the Signal / F-Droid discussion happening. It could be useful to someone. I don't know enough to judge what option is better.
Is there some signing in place to ensure it's not a malicious repo? I don't really trust unofficial F-Droid repos.
Unfortunately not. I'm trusting others who know better but if you want trusted as best as it can be you're stuck with the play store sadly.
If I remember correctly F-Droid supports reproducible builds, but it's a matter of the app developer supporting them. So there is light at the end of the tunnel, we're just not there yet.
You can download the APK from their website and it auto updates itself. It fetches notifications without Google required.
That's not the point
What's the point then? Is it fdroid specifically?
The point is that the community asked multiple times and they only started allowing apk downloads so people would stop asking. The signal project is open source for auditing purposes only, they have voiced their lament of forks and threatened to ban/block anyone not using an official client and refuse to make it easy to install through a package manager of the user's choosing. The version without Google cloud messaging has unreliable message delivery, even though there is unifiedpush as a standard that would allow people to register with any push notification service.