Why do people assume Signal messenger isn’t spying on you? Yes, it has open source code, yes it uses end-to-end encryption. But we can’t check which code runs in the version from Google Play or the App Store. And also their APK (IPA) build process is essentially a black box, it doesn’t use GitHub Actions or some other transparent build system. I also heard from Techlore that they add a proprietary part to the apk to filter bots. The only thing I can assume is that people scanned the traffic coming from the app (Android), phone (iOS) and checked whether encryption keys were being sent to Signal or not. But it seems to me that this can be also circumvented. What do you think?

P.S. I myself use Signal to communicate with relatives and friends. Definetly not a hater.

      • sv1sjp@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        I was talking about iPhone.

        On Android yes, OpenBoard, AOSP keyboard, KryptEY keyboard for example are find

    • FarLine99@lemm.eeOP
      link
      fedilink
      arrow-up
      1
      arrow-down
      2
      ·
      edit-2
      1 year ago

      We are talking about Signal spying on us, not Apple (Google). And I’m talking about the messages that I sent, not the person to me. And it doesn’t matter that the information will go to one place. Let’s not talk about it 😁