It does matter, because you can’t self-host nore audit the code. What you say isn’t wrong, unless they were to use a public facing reproducible build system ofc. But at minimum, if their server side code isn’t open source at all then you can’t even verify if it’s completely vulnerable spaghetti code or not. Some transparency is always better than none at all.
Yeesh, imagine getting this mad because of a post about a messenger. I hate explaining memes because it ruins them, but I guess I have no choice.
When most people hear about Threema, they believe that 5€ is way too much to pay for a messenger. Some realize that 5€ is not that bad, but without a continuous stream of money, a service like this will cease to exist once it runs out of money, so it’s better to avoid it. And if they read the entire website, and discover that the company is actually providing messaging solutions used by a lot of companies who pay them monthly, for each of their employees, it becomes clear where the money is coming from, and that the company won’t go bankrupt anytime soon.
That’s the meme. If you don’t like it, I understand. But you can fuck right off with calling everything that mentions a name of an app/service as an ad. I made memes in the past mentioning open source chat apps, and nobody ever called it an ad.
Would be cool if the server wasn’t proprietary and closed source. Until I can look through the source code of the server I’ll stick to Signal who has open sourced everything and a very well security reviewed implementation.
I can respect this, though just because they’ve released the source code it doesn’t mean that what’s in the repositories is actually running on the servers. It happened before, and while it is not a big deal, we can’t know what is precisely running on there at all times. And the stock Signal app doesn’t allow federating with other signal servers out there, so personally I don’t care whether the server side has a published source code.
Add comment