A community for Lemmy users interested in privacy
Rules:
THE FULL SCORECARD
| Rank | App | Score | Verdict |
|---|---|---|---|
| 1 | Cwtch | +21 | Zero compromise |
| 2 | Briar | +21 | Zero compromise |
| 3 | SimpleX Chat | +11 | High privacy |
| 4 | Threema | +9 | Strong privacy |
| 5 | Session | +8 | Strong privacy |
| 6 | Signal | +7 | Pragmatic standard |
| 7 | Wire | +4 | Moderate |
| 8 | Matrix | +3 | Moderate |
| 9 | iMessage | -7 | Poor |
| 10 | -11 | Avoid for sensitive use | |
| 11 | Viber | -13 | Avoid |
| 12 | Telegram | -14 | Avoid despite reputation |
| 13 | Discord | -15 | Public chats only |
| 14 | RCS / SMS | -21 | Zero protection |
A comparison of messaging systems that doesn't list XMPP?
I use SimpleX and one of the features I really like is the self-destruct code. You can have one pin that allows you to open your chats like normal, but if you input a self-destruct code instead the app opens like normal but deletes all information in the background and wipes your profile. All the user sees is an empty profile and empty chat history.
So if you're at a protest or something and MUST have your phone, you still have a safeguard against communication snooping. Say your phone is confiscated and they obtain your device lock, there's nothing they can do about the self-destruct code. "I just downloaded the app in case I ever needed to use it for sensitive data with my wife, but we never ended up using it."
I do wish that they allowed keypad scrambling though. Even stock Android allows lockscreen pinpad scrambling to avoid fingerprint code hinting.
does it also have a deadman switch
Not sure what you mean, but you can set it to immediately lock when the device is locked. So all it takes is for the screen to sleep or manually lock the phone.
I set mine to immediately lock but there's options for 5, 10, 30 seconds, etc.
It would be an auto-self destruct if you take more than X amount of days between successfully entering a code. So, like, if you died, it’d wipe itself after a certain number of days automatically.
Ah, not to my knowledge. But for me, considering everything is locally encrypted, thats sufficient. I'd imagine that the prospect of accidentally wiping the contents with an incorrect passcode would delay any attempts to crack it.
Signal no longer requires a phone number afaik
I do not believe that is correct.
https://aboutsignal.com/blog/why-a-phone-number-is-necessary-to-register-at-signal/
Your right, problem is ive been hearing about how theyre going to remove the phone number requirement for years now, apparently:
2020:Signal is actively working on removing the phone number requirement. It's a hard... | Hacker News
2024:Signal's Adding Support for Usernames, Removing Phone Number Requirement - CNET
That last one is some real deceptive marketing bullshit
Signal is removing the requirement to use a phone number for conversations
So you still need one for registration
Where would Delta Chat fall in this test?
Matrix for me, because I don't know anyone that have an active account, so I'm not messaging anyone. The best privacy
Then there's Signal
I put up my own Matrix server! It's great! I can use it to talk to myself, but with extra steps!
A self-hosted matrix server (https://stateofsurveillance.org/guides/advanced/matrix-element-self-hosting-guide/) would be what I trust the most.
Signal is what I try to get friends to use instead of Whatsapp and FB Messenger.
I like to think folk would trust me, an enthusiast, with absolute sovereign security for their information over superficial centralised security from a corporation. Well, as it is a Matrix server doesn't need any personal info from a client, just the bare essentials from their device to make comms work.
SimpeX chat , lxmf ,xmpp , ratspeak ,sideband ,meshchat ,nomad network .
Never heard of Linddun ,will give it a try.
I dont think it is an app itself, but a scoring system to grade the privacy of existing other apps more empirically vs. their marketing BS.
Linddun is basically 7 parameters for privacy. Yes a bit less known true
None.