• cobra89@beehaw.org
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    5 months ago

    Would be cool if the server wasn’t proprietary and closed source. Until I can look through the source code of the server I’ll stick to Signal who has open sourced everything and a very well security reviewed implementation.

    • tsugu@slrpnk.netOP
      link
      fedilink
      arrow-up
      0
      ·
      5 months ago

      I can respect this, though just because they’ve released the source code it doesn’t mean that what’s in the repositories is actually running on the servers. It happened before, and while it is not a big deal, we can’t know what is precisely running on there at all times. And the stock Signal app doesn’t allow federating with other signal servers out there, so personally I don’t care whether the server side has a published source code.

    • tsugu@slrpnk.netOP
      link
      fedilink
      arrow-up
      0
      ·
      5 months ago

      Why do you insist that anything mentioning an app/service you don’t know is an ad?

        • tsugu@slrpnk.netOP
          link
          fedilink
          arrow-up
          0
          ·
          5 months ago

          Yeesh, imagine getting this mad because of a post about a messenger. I hate explaining memes because it ruins them, but I guess I have no choice.

          When most people hear about Threema, they believe that 5€ is way too much to pay for a messenger. Some realize that 5€ is not that bad, but without a continuous stream of money, a service like this will cease to exist once it runs out of money, so it’s better to avoid it. And if they read the entire website, and discover that the company is actually providing messaging solutions used by a lot of companies who pay them monthly, for each of their employees, it becomes clear where the money is coming from, and that the company won’t go bankrupt anytime soon.

          That’s the meme. If you don’t like it, I understand. But you can fuck right off with calling everything that mentions a name of an app/service as an ad. I made memes in the past mentioning open source chat apps, and nobody ever called it an ad.

    • GregorTacTac@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      5 months ago

      The server side code doesn’t matter I’d it’s open source or not. You can’t be sure they’re actually running the code they’re publishing.

      • Rustmilian@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        5 months ago

        It does matter, because you can’t self-host nore audit the code. What you say isn’t wrong, unless they were to use a public facing reproducible build system ofc. But at minimum, if their server side code isn’t open source at all then you can’t even verify if it’s completely vulnerable spaghetti code or not. Some transparency is always better than none at all.