danie10, to random
@danie10@mastodon.social avatar

Signal adds an extra layer of camouflage with alternate icons and descriptions for Android

As illustrated below, the feature currently appears under Settings > Appearance > App Icons, provided you’re on Signal for Android version 6.21.3. The ability to change app icons is nothing new for Android users, particularly for those accustomed to custom RO ...continues

See https://gadgeteer.co.za/signal-adds-an-extra-layer-of-camouflage-with-alternate-icons-and-descriptions-for-android/

#privacy #signal #technology

marcjacquemin, to random German

Hurra! Das Thema und geht dank in die nächste Runde. Laut geleakter Dokumente wird sich Spanien für ein EU-weites Verbot von einsetzen. Da wird das als letzte Instanz sicherlich viel Arbeit vor sich haben.

https://www.mactechnews.de/news/article/Ende-zu-Ende-Verschluesselung-Spanien-fuer-EU-weites-Verbot-Deutschland-haelt-dagegen-182583.html

to3k, to android Polish
@blog.tomaszdunia.pl avatar
Merovius, to random
@Merovius@chaos.social avatar

PSA, if someone asks you for contact info (e.g. a phone number) of someone you know, the correct response is "I can't give that to you, but I can give them yours".

It's efficient and adds no round-trips, it's privacy friendly, it's non-awkward and it's social engineering resistant. It's a universally good rule.

And the corollary, of course: Don't ask someone for another person's contact info - ask them to pass on yours.

kkarhan,
@kkarhan@mstdn.social avatar

@Merovius also handing over someone elses contact details without their explicit permission is literally anfelony in #Germany as it violates #GDPR & #BDSG...

#NotLegalAdvice but this is why I can't and won't use #WhatsApp, #Signal, #Telegram or any other #SingleVendor / #SingleProvider #Messenger: They steal data AND have unacceptable ToS!

Mehrad, to random
@Mehrad@fosstodon.org avatar

If you are accepting donation and you set a minimum limit, then it is not donation, it is a purchase, simply because you have set the minimum price. Really that simple.

calculsoberic, to random

Please, let's never federate with Facebook or Google. I am very concerned what they will do privacy-wise.

sergeant,
@sergeant@qoto.org avatar

@calculsoberic @louis VPN, Encrypted emailservices like and , encrypted messengers like and , alternative search engines like .org and . Using privacy oriented browsers like and hardened like and so on. There's a lot you can do to withold your personal data. Don't ever believe it's useless or a ran course. There are always things you can do to give away as less info as possible. Don't give in!

kerfuffle, to random
@kerfuffle@mastodon.online avatar

Anyone else here using #Signal who think that message notifications are unreliable? I hate having to use #WhatsApp but at least I get notified of messages coming in.

edendestroyer, to random

"i have to use #whatsapp for work" is not a good excuse to not have #signal or #xmpp on the side

Wyndix, to random

I swear it's so sad that #Signal and #Telegram don't support ntfy yet

Wyndix, to random

Am I the only one who thinks that #Signal would have worked better as a p2p app?

PrivacyDigest, to internet
@PrivacyDigest@mas.to avatar

Twitter’s #Encrypted DMs Are Deeply Inferior to #Signal and #WhatsApp

The social network's new #privacy feature is technically flawed, opt-in, and limited in its functionality. All this for just $8 a month.
#Twitter #socialnetwork #e2ee #encryption

https://www.wired.com/story/twitter-encrypted-dm-signal-whatsapp/

downey, to random
@downey@floss.social avatar

🚨 Here's the important news about that statists REALLY want to distract you from seeing or talking about this week:

🇮🇳 Government in just blocked 14 different encrypted apps such as and .

🔒 Privacy is a human right. Protect it with all your might.

:boost_love: Spread the word.

https://epaper.mvkashmir.com/epaper/edition/198/paper/page/3

kkarhan,
@kkarhan@mstdn.social avatar

@downey True, #Zulip & #IRC don't do #E2EE, but neither does #Signal or #Telegram or #WhatsApp.

#NotYourKeys = #NotSecureEncryption.

No public APIs = no client & server diversity = backdoors are trivial to integrate.

aral, to random
@aral@mastodon.ar.al avatar

Encrypted messaging provider: “We make our money selling this to the police.”

Tech folks: This is cool and normal.

jz,
@jz@mamot.fr avatar

@aral

Also encrypted messaging provider: "We host our platform on the computers of an exploitative billionaire that also host the CIA's cloud. We promised 7y ago you'll be able to use our service without a phone#, you got cyber-ponzi-currency scheme instead. We will never federate and if we don't like you we renounce to software freedom".

Tech folks: Use #Signal.

At least with #Matrix one can use their own server, different clients/configurations, and still communicate to rest of the world.

glynmoody, to random
@glynmoody@mastodon.social avatar

#WhatsApp could disappear from UK over privacy concerns, ministers told - https://www.theguardian.com/technology/2023/may/08/whatsapp-could-disappear-uk-over-privacy-concerns-ministers-told "If push came to shove, they say, they would choose to protect the security of their non-UK users." bill is another product of ignorant #brexit exceptionalism. #e2e #encryption

pendantry,

@glynmoody I'm certainly no fan of #brexit (quite the opposite), but if #WhatsApp were to disappear it would be no loss. Faecesbook – sorry, 'meta' – already has too large a share of big tech intrusion into our private lives. #Signal (https://signal.org/) is a superior product in any case; in my opinion we should all be switching to that in droves anyway.

kravietz, to random
@kravietz@agora.echelon.pl avatar

US leaked intelligence files contain an interesting piece on #Binance CEO correspondence in #Signal, including one with auto-delete feature enabled. This does not necessarily indicate compromise or cooperation of the Signal infrastructure, and the description very much matches the capabilities of US TAO (tailored access operations) or Israeli Pegasus. Zhao's phone could have been compromised by a zero-day exploit in #Android or any other application, which opens door to a custom, hidden app pulling messages from Signal as they arrive. Or, a backdoored Signal binary could have been installed covertly by physical intervention or the zero-day method.

image/jpeg

silmathoron, to random
@silmathoron@floss.social avatar

What's the status of #stickers in #XMPP ?

I've found this #XEP 0 but it shows as experimental so I was wondering whether discussions were happening somewhere or if one can add a +1 about it somewhere.

I know it will sound stupid or just not a priority to some people but unfortunately, stickers are a requirement for many of my friends when it comes to #instantMessaging.

mattj,
@mattj@floss.social avatar

@kris
Contrary to the confusing title, XEP-0449 is primarily describing a way to distribute sticker packs via #XMPP. Actually sending a sticker to someone uses standard file transfers.

Rather than supporting XEP-0449 sticker packs that don't exist, #Cheogram is compatible with the same stickers #Signal uses which are widely available. You can add sticker packs yourself, and save stickers you receive.

Demo video: https://kumi.tube/w/7tCujiwVdjZBavv3FbphMN
Blog post: https://blog.jmp.chat/b/cheogram-android-stickers-2023
@silmathoron

PuschyMTB, to random German

Nachdem es gestern einen Spam-Angriff im gab, hatte ich auch einen über . Fand ich sehr strange.

skellig, to random German
@skellig@social.tchncs.de avatar

#signal
Ich habe eine Nachricht von einer mir unbekannten Person über den Messenger Signal bekommen, mit Bild und der Aufforderung den Kontakt zu speichern. Das merkwürdige daran ist, dass diese Nachricht über den Account eines Freundes geschickt wurde, der davon nichts wusste. Wie kann das sein?

Natureshadow, to internet

is a proprietary platform.
is a proprietary platform.
is a proprietary platform.
is a proprietary platform.
is a proprietary platform.
is a proprietary platform.
is a proprietary platform.

Natureshadow,

@sanfierro

#Signal publishes its source code, but places a lot of restrictions on it: You can't use a self-compiled binary to talk to their central servers (which is why it is not in F-Droid). You can't meaningfully operate your own server because the official server won't federate with it.

#Mastodon implements #ActivityPub in many non-standard-conforming ways. And because its market share is so huge, it can force other software to copy the bugs instead of fixing them.

scy, to random
@scy@chaos.social avatar

Okay I finally realized why I can't seem to get an intuitive understanding of which number in a #Signal voice message is the duration and which one is the timestamp. Just look at this shit. Look at it! Do you see the problem?

Who thought this was a good idea?

admin, to socialwork

TITLE: Confusion in Text Messaging, Encryption, and HIPAA

A therapist colleague of mine contacted Ring Central (a video and
telephone platform that provides HIPAA BAA subcontractor paperwork upon
request) with questions about their messaging capabilities and
encryption. They were looking for a compliant way to text message with
clients. The support staff directed them to this article:

https://support.ringcentral.com/article-v2/Intro-to-end-to-end-encryption-in-RingCentral-messaging.html?brand=RingCentral&product=MVP&language=en_US
<https://support.ringcentral.com/article-v2/Intro-to-end-to-end-encryption-in-RingCentral-messaging.html?brand=RingCentral&product=MVP&language=en_US>

At first glance, the article would seem to make messaging with clients
golden as a good level of encryption is described and the therapist has
a HIPAA BAA with Ring Central. Right?

Wrong.

A few different topics are getting confused here -- smart phone SMS text
messaging, messaging within Ring Central apps and websites, and HIPAA
BAA subcontractor agreements.

With SMS text messaging by phone it will never be HIPAA compliant (even
if the therapist sends it from within Ring Central) because the client
will get the SMS text message unencrypted on their smartphone.

Messaging within the Ring Central apps and website IS at an excellent
level of encryption -- but won't be covered by the therapist's HIPAA BAA
agreement unless the people messaged are also part of the therapist's
company account or are other therapists with their own Ring Central
accounts with HIPAA BAA subcontractor agreements. This will rarely if
ever cover therapy clients.

This gets confusing. So -- for example -- when I go into my Ring
Central account online and click on "Message" I'm invited to email a
messaging link to anyone I choose. So far so good. But when that
person (like a client for example) goes to that messaging link, Ring
Central REQUIRES them to sign up for their own FREE Ring Central
account. That FREE account WILL NOT be covered by a HIPAA BAA
agreement. So the messages sent to them (inside a Ring Central app or
website) will be encrypted but not HIPAA compliant.

Similar problem with Ring Central video conferencing. As long as the
client DOES NOT sign in with their own free account -- and instead goes
to my anonymous video link -- it will be covered under my BAA agreement
with Ring Central. However, Ring Central invites clients to sign up for
their own FREE account in order to video conference with me. If the
client makes that mistake, then its no longer a HIPAA compliant video
conference session because only one of our two Ring Central accounts is
covered by BAA.

I sometimes wonder why this all is left in such a confusing state?

Of course, I'm not a lawyer, so do your own research too.
*
Michael Reeder, LCPC
*
Hygeia Counseling Services : Baltimore / Mt. Washington Village location

@psychology
@socialwork @psychiatry
@psychotherapists

#RingCentral

admin,

I've said several times that the Signal messaging app may not be HIPAA compliant.

I was likely wrong.

From another thread (thank you Siderea): "You don't need a BAA from Signal to be in compliance with HIPAA. Signal is one of the very few platforms that meets the carrier standard not to need one, because they have no access to the contents of messages sent through them."

However, there is more to the story. You need to read this write-up from 2016 (so it may be dated):
https://personcenteredtech.com/vendorreview/signal/

Person Centered Tech says it best (above), but some factors include:

a) The need to keep copies of all communications in the client's chart. So you have to get messages out of Signal and into your chart. You also have to convince clients not to set their messages to self-destruct or you need to retrieve them before that happens! Signal messages (as of 2016) were not backed up automatically when your phone is backed-up. Lose your phone -- lose your messages.

b) You may need client phone numbers stored in your phone. Do you store them not under their names (initials maybe)? Do you need a BAA agreement with the vendor that backs-up your phone directory?

c) You may need to keep Signal from displaying client names on screen whenever you get a new pop-up alert of a new Signal message.

-- Michael

@siderea @psychology @socialwork @psychiatry @psychotherapists





jwildeboer, to fediverse
@jwildeboer@social.wildeboer.net avatar

The only thing I need DMs on / for is to tell someone how to get me on for private communications. Let's not fall into the trap of and the "one App for all". ActivityPub/Mastodon is for one to many communication. Shoehorning one-to-one communication to that feels wrong, IMHO @evan

Ganneff, to random

Ohmy. Because of #Signal being unable to properly support multiple accounts on one (multi-sim) device, I am running a clone of the signal app using an "App Cloner" tool for Android. Works nicely, I just got two different signal installs, one private, one work.

Recently someone introduced me to the tool #Shelter https://github.com/PeterCxy/Shelter which let's one use the "Work Profile" ability on Android and allows one to clone apps (or install them there again) inside it. Nice tool, like it, clear separation of areas, and one click can turn off the whole work profile. And shelter makes this easy to use.

Except. With #signal. No idea why, or how, but as soon as I transfer my account (using a backup) into the Work profile signal - it stops working. For everyone I am connected with. That is, groups simply do not let ANYONE send or receive anything. Messages from me to anyone do not pass and vice versa do not pass.

Transfer account back to the other clone - and hey, it all works again. Repeatable.

forevermarked, to vegan German

Herzlich Willkommen in unserer veganen Gruppe bei !

Vorstellung:
https://write.as/veganunity/eine-signal-gruppe-zum-austausch

Zur Gruppe:
https://veganunity.me

@vegan

boarddezernat,

@forevermarked @vegan

Nur mal so aus Interesse gefragt. Ist das in der Form als #Signal Gruppe erfolgreich?
Früher hätte man dafür ein Bulletin Board aufgesetzt. Ich kann mir das in einer Messengerapp echt schlecht vorstellen. Ich meine die Übersichtlichkeit und auch Administration.
Danke vorab!

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • khanakhh
  • mdbf
  • InstantRegret
  • Durango
  • Youngstown
  • rosin
  • slotface
  • thenastyranch
  • osvaldo12
  • ngwrru68w68
  • kavyap
  • cisconetworking
  • DreamBathrooms
  • megavids
  • magazineikmin
  • cubers
  • vwfavf
  • modclub
  • everett
  • ethstaker
  • normalnudes
  • tacticalgear
  • tester
  • provamag3
  • GTA5RPClips
  • Leos
  • JUstTest
  • All magazines