591
submitted 4 months ago by gytrash@feddit.uk to c/privacy@lemmy.ml

"Signal is being blocked in Venezuela and Russia. The app is a popular choice for encrypted messaging and people trying to avoid government censorship, and the blocks appear to be part of a crackdown on internal dissent in both countries..."

top 50 comments
sorted by: hot top controversial new old
[-] freedomsailor@programming.dev 184 points 4 months ago* (last edited 4 months ago)

It’s like a medal of honor for a privacy preserving app 😄

[-] reallyzen@lemmy.ml 38 points 4 months ago

Indeed. If whatsapp isn't on the list, then I have all the confirmation I need.

[-] ivn@jlai.lu 22 points 4 months ago

The Russian government has also allegedly begun preparations to block the WhatsApp messaging app.

https://kyivindependent.com/messenger-signal-blocked-in-russia-media-says/

load more comments (4 replies)
load more comments (2 replies)
[-] captain_aggravated@sh.itjust.works 18 points 4 months ago

"Banned in 15 dicatorships!"

[-] whyNotSquirrel@sh.itjust.works 52 points 4 months ago

could matrix.org be as easily blocked, since it's decentralized I'm wondering?

At least it means that Signal is working as intended if they are blocking it, I guess that they don't have back doors.

[-] ivn@jlai.lu 41 points 4 months ago

Being decentralized prevents DNS or IP blocks but not blocks through DPI.

Signal has an option to masquerade it's traffic as regular HTTPS, I don't know if Matrix can do such a thing.

https://x.com/signalapp/status/1821979304626155930

[-] TarantulaFudge@startrek.website 27 points 4 months ago

I can answer this! All matrix calls are over https APIs. Ports and addresses are stored in a text file on the base domain or in DNS txt entry.

load more comments (6 replies)
[-] foremanguy92_@lemmy.ml 17 points 4 months ago

Matrix is in fact decentralized but in reality it is not so much, I don't know the number exactly but the majority of users use the matrix.org server

[-] steersman2484@sh.itjust.works 11 points 4 months ago

Those numbers only include instances that have telemetry enabled

load more comments (8 replies)
load more comments (1 replies)
[-] gytrash@feddit.uk 12 points 4 months ago

could matrix.org be as easily blocked, since it’s decentralized I’m wondering?>

Or SimpleX?

[-] TarantulaFudge@startrek.website 9 points 4 months ago

It cannot be easily blocked especially if you use your own homeserver every homeserver replicates the channel and it can operate without the original server! That's why signal and telegram are inherently flawed.

load more comments (4 replies)
[-] D61@hexbear.net 40 points 4 months ago

blocks appear to be part of a crackdown on internal dissent in both countries.

Or... you know... at least for Venezuela, the USA constantly fucking around with their elections and politics and local assets using Signal or something. Maybe, I dunno?

[-] Railcar8095@lemm.ee 18 points 4 months ago

Yeah. Telegram, should be next, there's a huge risk with it too. And email! Social networks too, just in case. And postal mail, we can't forget that. We should crack down any form of uncensored communication.

All for the benefit of the people, of course. \s

[-] RedWizard@hexbear.net 20 points 4 months ago

I mean signal was funded in part by the US intelligence community up until last year.

[-] dessalines@lemmy.ml 21 points 4 months ago

The current president of Signal is also still happy to do interviews with US-defense-oriented think tanks like Lawfare.

They probably still are funded by USIntel, considering how interested RFA was in pushing Signal in privacy-oriented spaces.

load more comments (21 replies)
[-] Novman@feddit.it 19 points 4 months ago

In UK don't ban them, but jail you if they don't like your posts, more democratic.

load more comments (29 replies)
[-] D61@hexbear.net 8 points 4 months ago

Self defense is self defense, would we expect some different behavior from a country being attacked from outside interests with publicly accessible end to end encryption services?

load more comments (9 replies)
load more comments (4 replies)
load more comments (3 replies)
[-] Churbleyimyam@lemm.ee 27 points 4 months ago

Would peer to peer apps be resistant to this sort of thing?

[-] MigratingtoLemmy@lemmy.world 24 points 4 months ago

Yes, but you'll have to install them from sources other than what governments deem official. Like F-droid.

Now, if they block p2p traffic that's a different story

[-] Churbleyimyam@lemm.ee 8 points 4 months ago

I am totally cool with F-droid.

[-] ReversalHatchery@beehaw.org 10 points 4 months ago

It depends. Somehow it has to discover the peers. Other than that, they could block traffic between residential IP addresses and there goes large part of the P2P network

load more comments (9 replies)
[-] Jocker@sh.itjust.works 27 points 4 months ago

Signal honored!

[-] dm9pZCAq@lemmy.ml 25 points 4 months ago

why telegram is not blocked? makes you think...

[-] CaptainSpaceman@lemmy.world 21 points 4 months ago

WhatsApp supposedly uses Signal protocol.

Why is THAT not blocked? Certainly they wouldnt roll their own encryption and bypass Signal security protocols after having Moxie come in, right? Right????

[-] Rose@lemmy.world 9 points 4 months ago

Russia is reportedly planning to block WhatsApp as well.

load more comments (1 replies)
[-] ivn@jlai.lu 16 points 4 months ago

Telegram is not secure, I guess if you can listen to it better not block it.

[-] Dark_Arc@social.packetloss.gg 9 points 4 months ago* (last edited 4 months ago)

I mean it was blocked before Signal was blocked. Russia somewhat famously badly broke their Internet trying to shutdown telegram... and eventually gave up.

I'm guessing Signal finally has enough market share to get the Russian government's attention but not enough market share that they think the web of proxies that kept Telegram online will keep Signal online.

load more comments (2 replies)
load more comments (2 replies)
[-] pancake@lemmygrad.ml 21 points 4 months ago
[-] dessalines@lemmy.ml 18 points 4 months ago

I wrote this, but I'd also like to add Drew Devault - Why I don't trust signal. There's a huge disconnect between what privacy advocates are saying about signal, and what reddit "privacy" communities think about it. If you read the article I linked, you'll see its because the Open Technology Fund (a US state-run entity), actively pushes signal in privacy spaces.

load more comments (7 replies)
load more comments (5 replies)
[-] possiblylinux127@lemmy.zip 17 points 4 months ago* (last edited 4 months ago)

Honestly I would've expected it to be blocked much earlier

load more comments (3 replies)
[-] marcie@lemmy.ml 15 points 4 months ago
[-] possiblylinux127@lemmy.zip 17 points 4 months ago

Matrix isn't secure depending on how you use it. It also doesn't protect individual identities terribly well.

Simplex Chat would be the better option however the main Simplex Chat server and matrix server could end up blocked as well.

[-] dessalines@lemmy.ml 28 points 4 months ago* (last edited 4 months ago)

Matrix is entirely self-hostable, and you can turn off both federation, and the requirements for any linkable identifiers.

Signal by contrast requires your phone number, isn't self-hostable, and is based in a five-eyes country.

[-] Lemongrab@lemmy.one 11 points 4 months ago

Matrix doesn't protect metadata, which is arguably just as (if not more) important than message data. Signal by contrast does protect metadata and proper implements Perfect Forward Secrecy for all chats. I do think Signal's centralized design and phone number requirements problematic, but Signal still has many merits. Such as its massive user base for a AGPL-only project.

load more comments (7 replies)
load more comments (2 replies)
load more comments (8 replies)
[-] vga@sopuli.xyz 11 points 4 months ago

Probably mostly because almost nobody uses it.

load more comments (2 replies)
load more comments (1 replies)
[-] Railcar8095@lemm.ee 11 points 4 months ago* (last edited 4 months ago)

Why countries that do not prosecute political dissent bock apps used by political dissenters? /s

[-] dessalines@lemmy.ml 11 points 4 months ago

Smart move, considering Signal is a US-hosted centralized service that has to comply with US NSL laws.

These comments below seem to be unaware of all the issues privacy advocates have of signal.

[-] ivn@jlai.lu 20 points 4 months ago

I don't get it, are you really arguing that Russia and Venezuela are blocking Signal to protect their citizens from American snooping?

[-] dessalines@lemmy.ml 24 points 4 months ago

All countries should ban US-domiciled companies like signal, or any communication platform hosted in Five-eyes countries, and especially ones domiciled in the US, which has to adhere to National Security Letters.

https://www.eff.org/issues/national-security-letters/faq

[-] QuadratureSurfer@lemmy.world 10 points 4 months ago* (last edited 4 months ago)

Isn't the whole point of something like End-to-End Encryption so that not even the company themselves can read your messages?

In that case it wouldn't matter even if they did turn the info over.

Edit: I read more into the page you linked. Looks like those NSLs can't even be used to request the contents either way:

Can the FBI obtain content—like e-mails or the content of phone calls—with an NSL?

Not legally. While each type of NSL allows the FBI to obtain a different type of information, that information is limited to records—such as “subscriber information and toll billing records information” from telephone companies.

[-] dessalines@lemmy.ml 10 points 4 months ago

You can read my article, or Drew Devaults on why he doesn't trust signal, which get more into this, but the short version is that US security forces don't have time to read the content of everyone's message anyway, they care more about the metadata: message timestamps and social graphs.

Signal stores all that data (via required phone numbers, meaning its linked to your real name and address), and via the US's key disclosure laws, it would be illegal for them to tell you that the US government is hoovering up that data.

load more comments (1 replies)
load more comments (2 replies)
load more comments (7 replies)
load more comments (4 replies)
[-] Catsrules@lemmy.ml 11 points 4 months ago
load more comments (1 replies)
[-] dirtybeerglass@hexbear.net 10 points 4 months ago

Unless you click the “unblock” button.

Gotta love Verge.

load more comments (1 replies)
load more comments
view more: next ›
this post was submitted on 10 Aug 2024
591 points (98.5% liked)

Privacy

32471 readers
671 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS