Rui Seabra
I'm amazed at the lack of proper vetting of the members of that infamous Signal group revealed by The Atlantic.
Jeffrey Goldberg did a brilliant job by keeping the questions to himself and seeing where it would lead.
Guys, the problem isn't about using Signal, the fact that they use it says a lot about the trust they have in its security.
It's "how on earth nobody checked, and double checked, the members before starting".
It's not the "fun and beer time" group!
Wow!
Gerard Braad
@RuiSeabra where Late Night shows have more guts than the actual members of the house.
Rui Seabra
@gbraad
I don't know, on one hand the news and shows bad mouth Signal for all the wrong reasons.
On the other hand, the excess of guts those guys have to have, to not even check the members or who the hell is that guy who was just added, is really impressive! ;)
Gerard Braad
@RuiSeabra they made a big deal when Rutte was still using a Nokia dumbphone to receive SMS messages ,as that was not stored/archived; can you imagine how this can be an avoidance of any traceability. These people can not be trusted ...
Rui Seabra
@gbraad
Yeah, but still that's is not the point of news, it's "oh, it's open source, that's bad".
WRT SMS, well, using it is just stupid. :)
Gerard Braad
@RuiSeabra I had not seen those arguments about it being open source as an issue; in the US media it was all linked to a 'commercial' service; unvetted, not suitable for classified data, etc.
Was this more in European news?
Rui Seabra
@gbraad
No, an interview with Jeffrey, and at least a couple others in CNN and MSNBC, iirc.
Rui Seabra
@gbraad
"That's bad" wrt "Open Source" is paraphrasing, they don't say it like that, but they use the usual FUD from Microsoft we're used to for many decades!
Rui Seabra
@gbraad
And at about 5:18 of this interview, Jeffrey Goldberg claims that their usage of Signal is bad because it's a commercial application, and that anybody can join (unclear language misleading that as if anybody can join any arbitrary group).
But great interview!
Gerard Braad
@RuiSeabra this is why I did not share the complete same opinion. The positioning of 'commercial' is not FUD, but rather a simplified observation this is not "government" (or a public service).
Many of the outlets mentioned the same: https://www.youtube.com/watch?v=rJQwmGEcwmU
Commercial is not wrong by definition. I am sure it will result in a ton or thousands of more signups.
Rui Seabra
@gbraad
And that "ton of thousands of more signups" is what leads me to a hypothesis: if this wasn't a mistake but something staged, what would be the gain? Then it hit me: they must have a way to break into Signal, and needed to advertise it's so safe that even they use it for secops.
Nothing better than an "accidental leak" with a less critical secop...
Rui Seabra
@gbraad
The positioning of commercial is not FUD, but "oh no, it's commercial" (it's a foundation), "it's open source, not something private or controlled by then", "anybody can join" (implying by omission a group, but that's not true), that *is* FUD.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.