Jack N.
2016-12-20 21:36:56 UTC
I dont think I need to explain what harm chrome(and features in chromium that report to google) can do irregardless of whether you are using it for normal web browsing or strictly Signal desktop. But briefly Chrome and some features in chromium report back to the google mothership, certain people have issues with that level of online tracking and the privacy issues that come with using a product tied into google services. I really think this is kind of common knowledge now, specially with more technologically minded users.
If Signal is to continue to be championed as one of the best end to end crypto messenger services, as it should be, well wouldn't it be great if it didn't rely on a browser that is an antithesis to almost all the ideals of said messaging app.
If you would like me to be even more specific well then that is a whole other longer convo which imo is getting off topic a bit. For anyone who is working on a serious leak or journalist working to uncover x,y,z issues google tracking, and by extension the NSA's access to that are indeed part of a valid threat model that is all.
And no I am not on a mac computer, I said that previously ive tried to get chromium working on mac osx but for others, but it was never as seemless or user friendly as firefox safari or chrome
--
If Signal is to continue to be championed as one of the best end to end crypto messenger services, as it should be, well wouldn't it be great if it didn't rely on a browser that is an antithesis to almost all the ideals of said messaging app.
If you would like me to be even more specific well then that is a whole other longer convo which imo is getting off topic a bit. For anyone who is working on a serious leak or journalist working to uncover x,y,z issues google tracking, and by extension the NSA's access to that are indeed part of a valid threat model that is all.
And no I am not on a mac computer, I said that previously ive tried to get chromium working on mac osx but for others, but it was never as seemless or user friendly as firefox safari or chrome
--
could you please explain what harm you think chrome/chromium can do to you if you're using it only for Signal Desktop? please, be specific.
i see you are on a Mac computer. are you aware that MacOS is not FOSS and you still trust with your files?
- jure
i see you are on a Mac computer. are you aware that MacOS is not FOSS and you still trust with your files?
- jure
And I am sorry if it sounds like I am coming on here to put down the work of OWS/Moxie, that is not my intention at all. I love Signal and have tried to follow as close as possible with the great work that OWS has done, from axolotl to signal being used on whatsapp to fb.
What are they giving up?
If forced to use chrome there are privacy implications of having google software on your machine which is an issue for some and the tracking of what you do within chrome. Chromium solves this issue surely? well yes and no, I think chromium is a great browser, if it wasnt it wouldnt be used as the source for so many browsers right? But last I checked chromium had some buggy issues on osx/windows. Last I used it it wouldn't auto update. Some parts are closed source. Some functionality is reliant on google servers. These might be deal breakers for some people. And if there are no "power users" I think its silly that people need to download another browser onto their machine if they dont have chrome/chromium already.
I was just trying to understand how and why this came to be and now that the google web apps are dead, maybe the future solution shouldn't also make some silly choices that end up being imo counterproductive.
I fail to see how the benefits of webapps, distribution being one of them if I remember/read correctly are so great that they overshadow what are in my opinion valid concerns. You mention this affecting about 5% of the userbase but about 50-40% of internet users use a browser other then chrome, so I think its actually more then about 5% of the user base. Anyone who wishes to use signal desktop must use chrome/chromium as it stands, why cant they just use signal desktop.
I just wonder are distribution/updating that hard that OWS has/had to tie signal desktop with another software package rather then just releasing a standalone program?
What specifically are you referring to when you mention my thoughts on brave browser?
I think its a funny attempt at solving the ab-blocking and distribution problem. But its a browser with a different vision and attempt to solve issues that the creators see in the modern web, issues I dont see how they pertain to signal and OWS.
Apologies if I am also coming off as a moaner or complainer, I try to keep up to date with the OWS stuff but there is never enough time in the day for everything..
--
I'm not really sure what you're arguing here? It seems to me that
you're just trying to persuade people that firefox is a better option
over chrome/chromium? And because whispersystems chose one of these
over the other, they're abandoning users? No they're not, users can
install both. Don't like / trust google? fine, install chromium, it's
open source.
Additionally, it shouldn't take much work to convert signal desktop to
another platform, it's been discussed time and time again. There were
even pull requests that went in that made the codebase more firefox
compatible. All it is is html, js and css... If whispersystems decided
to change platform, then the majority of the app will stay the same,
and given that google chrome apps will be abandoned mid next year,
this decision will need to be made anyway, and something like electron
will have to be used instead?
I'd be curious what you think of things like the brave browser, which
is as much locked to the google chrome platform as signal desktop is
(in fact moreso, they use things like webviews), they just package it
using electron (with some changes they push upstream).
Sorry if this response seems aggressive, I just get annoyed when
people come on to the mailing list accusing OWS/Moxie of making
decisions that are the end of the world, and not respecting the work
that everyone does, when really the things that you're complaining
about are minor, and effect less than 95% of the userbase.
What are they giving up?
If forced to use chrome there are privacy implications of having google software on your machine which is an issue for some and the tracking of what you do within chrome. Chromium solves this issue surely? well yes and no, I think chromium is a great browser, if it wasnt it wouldnt be used as the source for so many browsers right? But last I checked chromium had some buggy issues on osx/windows. Last I used it it wouldn't auto update. Some parts are closed source. Some functionality is reliant on google servers. These might be deal breakers for some people. And if there are no "power users" I think its silly that people need to download another browser onto their machine if they dont have chrome/chromium already.
I was just trying to understand how and why this came to be and now that the google web apps are dead, maybe the future solution shouldn't also make some silly choices that end up being imo counterproductive.
I fail to see how the benefits of webapps, distribution being one of them if I remember/read correctly are so great that they overshadow what are in my opinion valid concerns. You mention this affecting about 5% of the userbase but about 50-40% of internet users use a browser other then chrome, so I think its actually more then about 5% of the user base. Anyone who wishes to use signal desktop must use chrome/chromium as it stands, why cant they just use signal desktop.
I just wonder are distribution/updating that hard that OWS has/had to tie signal desktop with another software package rather then just releasing a standalone program?
What specifically are you referring to when you mention my thoughts on brave browser?
I think its a funny attempt at solving the ab-blocking and distribution problem. But its a browser with a different vision and attempt to solve issues that the creators see in the modern web, issues I dont see how they pertain to signal and OWS.
Apologies if I am also coming off as a moaner or complainer, I try to keep up to date with the OWS stuff but there is never enough time in the day for everything..
--
Yes that is great that those who run chromebooks have a desktop option, Its just a shame all those who aren't running a chromebook/chrome based browser don't have those same options, or do not without giving up something they value.
Huh? What are they giving up?I'm not really sure what you're arguing here? It seems to me that
you're just trying to persuade people that firefox is a better option
over chrome/chromium? And because whispersystems chose one of these
over the other, they're abandoning users? No they're not, users can
install both. Don't like / trust google? fine, install chromium, it's
open source.
Additionally, it shouldn't take much work to convert signal desktop to
another platform, it's been discussed time and time again. There were
even pull requests that went in that made the codebase more firefox
compatible. All it is is html, js and css... If whispersystems decided
to change platform, then the majority of the app will stay the same,
and given that google chrome apps will be abandoned mid next year,
this decision will need to be made anyway, and something like electron
will have to be used instead?
I'd be curious what you think of things like the brave browser, which
is as much locked to the google chrome platform as signal desktop is
(in fact moreso, they use things like webviews), they just package it
using electron (with some changes they push upstream).
Sorry if this response seems aggressive, I just get annoyed when
people come on to the mailing list accusing OWS/Moxie of making
decisions that are the end of the world, and not respecting the work
that everyone does, when really the things that you're complaining
about are minor, and effect less than 95% of the userbase.
Yes that is great that those who run chromebooks have a desktop option, Its
just a shame all those who aren't running a chromebook/chrome based browser
don't have those same options, or do not without giving up something they
value.
I perhaps in my ignorance fail to see how distributing an open-source cross
platform application verifiable via the standard methods employed today
would be less secure/controllable over a browser extension.
Im aware Moxie is against the idea of a "power user" but secure download
from https encrypted website is more then enough security for the non
"power" users while still being able to offer sig files for verification for
the more paranoid users. Is this really such a large overhead in terms of
resources for OWS? Couldn't the software simply not allow the user to send a
message without upgrading to the latest version, like how signal does not
allow messages to non-verified contacts
--
Whatever the reasons,
I'm just thankful that the folks in my household using a Chromebook have a
desktop option.
Android is coming to Chromebook users which opens up Firefox as a
possibility...
Interesting element to Chrome Web-app-ness... I can open the Signal
application without opening up Chrome. Which is nice.
--
Pn0 | 0x2412CAE6
-------- Original Message --------
Subject: Re: [whispersystems] signal desktop chrome requirements
Local Time: December 20, 2016 10:08 AM
UTC Time: December 20, 2016 3:08 PM
Hi Jack,
There have been discussions on this mailing list, the archive is
available at [0].
I think, [1] and [2] might brush on the concerns you have voiced.
Basically, the original reason (if I recall correctly) comes down to
update management.
Best Regards,
Raphael
[0] >>>> https://lists.riseup.net/www/arc/whispersystems
[1]
https://lists.riseup.net/www/arc/whispersystems/2016-01/msg00018.html
(People want a standalone version of Signal for Desktop.)
[2]
https://lists.riseup.net/www/arc/whispersystems/2016-08/msg00011.html
(what will happen to Signal Desktop?)
just a shame all those who aren't running a chromebook/chrome based browser
don't have those same options, or do not without giving up something they
value.
I perhaps in my ignorance fail to see how distributing an open-source cross
platform application verifiable via the standard methods employed today
would be less secure/controllable over a browser extension.
Im aware Moxie is against the idea of a "power user" but secure download
from https encrypted website is more then enough security for the non
"power" users while still being able to offer sig files for verification for
the more paranoid users. Is this really such a large overhead in terms of
resources for OWS? Couldn't the software simply not allow the user to send a
message without upgrading to the latest version, like how signal does not
allow messages to non-verified contacts
--
Whatever the reasons,
I'm just thankful that the folks in my household using a Chromebook have a
desktop option.
Android is coming to Chromebook users which opens up Firefox as a
possibility...
Interesting element to Chrome Web-app-ness... I can open the Signal
application without opening up Chrome. Which is nice.
--
Pn0 | 0x2412CAE6
-------- Original Message --------
Subject: Re: [whispersystems] signal desktop chrome requirements
Local Time: December 20, 2016 10:08 AM
UTC Time: December 20, 2016 3:08 PM
Hi Jack,
There have been discussions on this mailing list, the archive is
available at [0].
I think, [1] and [2] might brush on the concerns you have voiced.
Basically, the original reason (if I recall correctly) comes down to
update management.
Best Regards,
Raphael
[0] >>>> https://lists.riseup.net/www/arc/whispersystems
[1]
https://lists.riseup.net/www/arc/whispersystems/2016-01/msg00018.html
(People want a standalone version of Signal for Desktop.)
[2]
https://lists.riseup.net/www/arc/whispersystems/2016-08/msg00011.html
(what will happen to Signal Desktop?)
Hello
Ive a few questions with regards to the Signal desktop application that
I wasn't able to find so I was hoping someone here probably knows the
answer.
Why is it that Signal Desktop is only available as a chrome/chromium
extension?
What was the design decision and implementation of the code that meant a
chromium extension was the best choice for Signal desktop over a more
open browser(such as Firefox) or a standalone application?
Chrome has more percentage of users but generally isn't "safe/secure" in
the eye's of many people as Google has its hands in every line of code.
Chromium is one step better but for many still isn't good enough
compared to Firefox.
Firefox while only having about 1/5th of the users of chrome would
probably lead chrome in percent of users who would have a privacy
issue/security issue. Its close ties with the tor project give credence
to its privacy/anonymity philosophy over the likes of Chrome.
Was Chrome chosen so that Signal desktop could have greater reach for
any and all users, ignoring those with security/privacy issues revolving
around the big G?
Was is some technical reason that meant signal desktop could only be
implemented in Chromium based browsers?
Why not avoid the worst of both worlds, where privacy and anonymity
focused users are not forced into using a browser they don't trust, and
casual users are not forced into downloading a browser they don't care
about or need( if Signal desktop was only on Firefox) and just develop
Signal desktop as a standalone application.
Please excuse any ignorance on my part and if this has been answered
before, I was not able to find material openly discussing this.
Regards
--
Ive a few questions with regards to the Signal desktop application that
I wasn't able to find so I was hoping someone here probably knows the
answer.
Why is it that Signal Desktop is only available as a chrome/chromium
extension?
What was the design decision and implementation of the code that meant a
chromium extension was the best choice for Signal desktop over a more
open browser(such as Firefox) or a standalone application?
Chrome has more percentage of users but generally isn't "safe/secure" in
the eye's of many people as Google has its hands in every line of code.
Chromium is one step better but for many still isn't good enough
compared to Firefox.
Firefox while only having about 1/5th of the users of chrome would
probably lead chrome in percent of users who would have a privacy
issue/security issue. Its close ties with the tor project give credence
to its privacy/anonymity philosophy over the likes of Chrome.
Was Chrome chosen so that Signal desktop could have greater reach for
any and all users, ignoring those with security/privacy issues revolving
around the big G?
Was is some technical reason that meant signal desktop could only be
implemented in Chromium based browsers?
Why not avoid the worst of both worlds, where privacy and anonymity
focused users are not forced into using a browser they don't trust, and
casual users are not forced into downloading a browser they don't care
about or need( if Signal desktop was only on Firefox) and just develop
Signal desktop as a standalone application.
Please excuse any ignorance on my part and if this has been answered
before, I was not able to find material openly discussing this.
Regards
--