bojkotiMalbona<p><span class="h-card" translate="no"><a href="https://defcon.social/@manchicken" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>manchicken</span></a></span> <br>VOIP numbers do not receive SMS.</p><p>But in any case, Signal has been known to be a shitty option for years:</p><p><a href="https://github.com/privacytools/privacytools.io/issues/779" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.com/privacytools/privac</span><span class="invisible">ytools.io/issues/779</span></a></p><p>And just today a 15 y.o kid discovered Signal was foolish enough to proxy through Cloudflare, which enabled the kid to denonymize users:</p><p><a href="https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">gist.github.com/hackermondev/4</span><span class="invisible">5a3cdfa52246f1d1201c1e8cdef6117</span></a></p><p>Regarding <span class="h-card" translate="no"><a href="https://infosec.exchange/@Lockdownyourlife" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>Lockdownyourlife</span></a></span>’s question -- both are terrible options.</p><p>I favored Wire over Signal for years b/c Wire folks did not make the embarrassingly stupid decisions that Signal folks made. Wire did not impose phone number registration. But Wire’s app was shit quality. <a href="https://infosec.exchange/tags/Electron" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Electron</span></a> -- need I say more? Ok, i will. Their AOS app was inflicted with designed obsolescence. Buy new phone hardware or gtfo. Then they ditched their desktop users entirely, by accident, and never corrected the accident. Oops. Just one day Wire quit working. But it was a blessing in disguise b/c Wire has the quite nasty defect of silently dropping messages. The sender thinks a msg was sent but the recipient never sees it. It was a chronic problem. It’s worst kind of defect a msging app can have.</p><p>Snikket is the right answer, generally.</p><p>/cc <span class="h-card" translate="no"><a href="https://mastodon.scot/@starraven" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>starraven</span></a></span></p><p>----</p><p>(edit) an accurately named “manchicken” replied to this with a hit-and-run chickenshit msg then blocked me so that replies would be blocked. Yet his comment gives poor guidance. So apparently I have to reply to that by editing the msg he replied to. This is my reply:</p><p>A single corp protectionist cloudflare-dependant project masquerading as a non-profit despite pushing walled gardens on people to collect statistics is not what should be built upon or invested in by the community. </p><p>Signal was a shit show from start with phone number reg, neglecting that in many jurisdictions around the world mobile phone subscriptions require registering national ID to phone number.</p><p>If you want to improve the commons and protect privacy, XMPP is open standards, decentralised, and welcomes community efforts. Signal cannot be salvaged. XMPP is where resources should be invested with maximal community benefit.</p>