this post was submitted on 12 Nov 2024
117 points (99.2% liked)

Technology

3716 readers
460 users here now

Which posts fit here?

Anything that is at least tangentially connected to the technology, social media platforms, informational technologies and tech policy.


Post guidelines

[Opinion] prefixOpinion (op-ed) articles must use [Opinion] prefix before the title.


Rules

1. English onlyTitle and associated content has to be in English.
2. Use original linkPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
3. Respectful communicationAll communication has to be respectful of differing opinions, viewpoints, and experiences.
4. InclusivityEveryone is welcome here regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
5. Ad hominem attacksAny kind of personal attacks are expressly forbidden. If you can't argue your position without attacking a person's character, you already lost the argument.
6. Off-topic tangentsStay on topic. Keep it relevant.
7. Instance rules may applyIf something is not covered by community rules, but are against lemmy.zip instance rules, they will be enforced.


Companion communities

!globalnews@lemmy.zip
!interestingshare@lemmy.zip


Icon attribution | Banner attribution


If someone is interested in moderating this community, message @brikox@lemmy.zip.

founded 2 years ago
MODERATORS
 

Privacy-focused messaging app Signal is adding new features for video calls, including links, reactions and a calls tab, in a bid to pose as an alternative to Zoom, Google Meet and Microsoft Teams.

all 26 comments
sorted by: hot top controversial new old
[–] fmstrat@lemmy.nowsci.com 26 points 8 months ago (1 children)

Until you can manage a "group of people" (your company), and give them permissions to "rooms" (chats/channels) by group, Signal can't compete.

Administrators aren't going to one-off everything, or rely on users to do it when there is no admin visibility.

Getting admin tools right with an encrypted service is key here.

[–] rumba@lemmy.zip 1 points 8 months ago (1 children)

TBF, the level of privacy afforded at work will never be usable in most companies.

At scale, it's a security nightmare. PII, HIPAA, PCI, If OPSEC can't at the very least go back and see what happened in private channels, it's going to be a hard sell.

[–] fmstrat@lemmy.nowsci.com 2 points 8 months ago (1 children)

Yea I've done work in Privacy focused companies, and they love this stuff, but everyone else who isn't a journalist... Probably not.

You mention HIPPA, and the interesting one with that (to me) is offices don't track conversation already, so it probably wouldnt impact situations like that, but Signal chat most certainly would. Can't report a violation if you can't see it.

[–] rumba@lemmy.zip 1 points 8 months ago (1 children)

I worked for a healthcare / health insurance place some time ago. They monitored absolutely everything. They had everything. We ran appliances to Man in the Middle HTTPS sites, We had sneaky SMTP servers that would detect credit card numbers or social security numbers block the emails from going out and send them to a secure web portal. The recipient would just get a message that there's a secure message waiting for them and they have to go login and retrieve it.

These days if you run slack Enterprise, The workspace managers can get access to even the most private of chats. I'm not sure about teams I've managed to stay away from it. I believe you could do this in Gchat but it would probably require a lot of legwork maybe somebody makes an application for it already I don't know.

I didn't mean to say that no companies would go for it has anybody even just running small business versions of software don't have access to that kind of thing, The places that have any intent on decent operational security are going to want their tentacles into all the things.

[–] fmstrat@lemmy.nowsci.com 2 points 8 months ago

I worked in similar for many years as well, including with companies that provided services to tons of hospitals. What you experienced seems pretty advanced for what I ran into, so good to know.

[–] donuts@lemmy.world 19 points 8 months ago (1 children)

And an alternative to Discord?

A chatroom isn't hard to replace, but the video/voice calling on Discord is what keeps people there.

[–] themachine@lemm.ee 8 points 8 months ago (3 children)

Signal should evolve to have discord-like channels and servers. I think it’d be brilliant.

[–] qyron@sopuli.xyz 7 points 8 months ago

Please don't.

I am aware what Discord is for and respect it but it's ectic to be in a Discord room. Signal does not need it.

[–] xnx@slrpnk.net 2 points 8 months ago

Yes they should. Having business and gaming communities using it also helps the journalists and activists that use it to stay safe by normalizing its use

[–] Skydancer@pawb.social 18 points 8 months ago (2 children)

Great. Now can we get text messaging back so that it's possible to convince people to use it again?

[–] qyron@sopuli.xyz 9 points 8 months ago (1 children)

Security risk, by their own admissal.

[–] Skydancer@pawb.social 8 points 8 months ago

No, that was an excuse. They claimed people could mistakenly send unencrypted messages. Easily resolved by changing the color of conversations and send buttons to flag SMS as insecure.

It was really about moving development resources to features like this one. Unfortunately, it makes it much harder to convince people to use (or keep using) Signal, meaning more messages that go by insecure messaging instead.

[–] krippix@feddit.org 4 points 8 months ago (2 children)

Is that a US thing? I don‘t know anyone who still uses SMS. Or do you mean something else?

[–] Skydancer@pawb.social 3 points 8 months ago

Nailed it. Yes, it's a US thing.

[–] jqubed@lemmy.world 2 points 8 months ago* (last edited 8 months ago) (1 children)

The U.S. lagged adoption of SMS compared to Europe (relatively high prices for texting in the early days while relatively low prices for calling in the same era) but now SMS/RCS/iMessage are the dominant mobile messaging method in the U.S. There’s much lower adoption of third-party services like WhatsApp compared to the rest of the world because basically everyone has those services (SMS/RCS) already on their phone, they don’t have to sign up for a service that not everyone might use, and it’s basically free on every phone in the U.S. now.

[–] Kusimulkku@lemm.ee 2 points 8 months ago (1 children)

SMS and especially MMS sucks ass though.

[–] jqubed@lemmy.world 1 points 8 months ago

Yup, I spent years begging my family to stop sending family photos from gatherings through text messages, to no avail. I eventually switched to iPhone and see that it’s fine if we’re all on iMessage, but many of my aunts/uncles/cousins are on Android so if they’re in the picture then it gets sent as MMS and we get terrible images again.

[–] ByteOnBikes@slrpnk.net 7 points 8 months ago (1 children)

Jitsi is a open-source video platform you can self-host.

I don't trust anything going through another company's servers. Zoom had to backpedal when it was found feeding content to AI... Imagine talking about your company business secrets and now some dickwad are Zoom reads the transcripts and steals it.

[–] JackbyDev@programming.dev 1 points 8 months ago

Is Signal video and call not end to end encrypted like their messaging?

[–] 01189998819991197253 3 points 8 months ago

That's fine and all, but if I use a product (especially a privacy focused one) for my personal communication, I do not want to use it for work. A proper separation between work and personal is too important to me.

[–] hendrik@palaver.p3x.de -4 points 8 months ago (1 children)

So they just added a few buttons?

[–] huginn@feddit.it 13 points 8 months ago (1 children)

Call links are a lot more work than "a few buttons"

[–] pivot_root@lemmy.world 0 points 8 months ago (1 children)

That's not really the best example to prove a lot of work. Call links are actually pretty easy from a conceptual standpoint:

  • Make a small website to accept https://join.my.website/?callid=...&password=...

  • Have the website redirect to: myapp:join/:callid/?password=...

  • Have your app register as a myapp protocol handler.

  • When a myapp:join/:callid/ URL is visited, open the same window that would be used normally for joining a call by ID.

[–] huginn@feddit.it 1 points 8 months ago* (last edited 8 months ago) (1 children)

I've been an android developer for a decade at this point, I'm aware of how app deep links work.

The comparison is not "what LOE is call linking from scratch" but rather "how does call linking meshing into existing production codebases across all platforms compare in LOE to 3 buttons?" And the answer is self evidently more.

You're minimizing the amount of effort and we're comparing it to buttons. Adding "a few buttons" is very different than setting up 3 platforms to all use a new protocol (calls from links will require new handling - previously all calls were just based on authenticated users being allowed into webrtc calls based on their tokens. Now you have to have a new handler which joins a call with the token in the URL - that can't be handled identically). Then we get into the Android app, much of which is still in Java, which uses multi-activity-srchitrcgure meaning you've gotta pass data through each layer manually, rewriting each of these activities to accept the new deep link and route to the right end.

And then you've got to be sure it all coordinates across iOS, Android and your backend.

It's not hard but it's not "a few buttons". It's probably 2 weeks of work for skilled and competent engineers, 1 per platform.

Do you actually have any experience in Mobile dev? You sound like a fresh outta college junior eng - cocky and confident that everyone else is wrong, making it harder than it needs to be etc.

Just like that cocky junior eng you're too unaware of what you don't know to realize you're wrong. Wade through the grass a few times and you'll realize the flowery meadow is full of snakes.

[–] pivot_root@lemmy.world 1 points 8 months ago* (last edited 8 months ago)

You're barking up the wrong tree here, buddy. I'm not the person who said "it's a few buttons."

I was merely pointing out that from a conceptual standpoint, deep links don't need months of research and design work. The difficulty—as you pointed out—comes in knowing how to work with the various different platforms and integrating the feature into existing codebases.