Salta al contenuto principale


📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).

It’s also concerning. 1/

in reply to Meredith Whittaker

Concerning, bc it indicates that the extent of the concentration of power in the hands of a few hyperscalers is way less widely understood than I’d assumed. Which bodes poorly for our ability to craft reality-based strategies capable of contesting this concentration & solving the real problem. 2/
in reply to Meredith Whittaker

The question isn’t "why does Signal use AWS?" It’s to look at the infrastructural requirements of any global, real-time, mass comms platform and ask how it is that we got to a place where there’s no realistic alternative to AWS and the other hyperscalers. 3/

reshared this

in reply to Meredith Whittaker

Running a low-latency platform for instant comms capable of carrying millions of concurrent audio/video calls requires a pre-built, planet-spanning network of compute, storage and edge presence that requires constant maintenance, significant electricity and persistent attention and monitoring. 4/

reshared this

in reply to Meredith Whittaker

Instant messaging demands near-zero latency. Voice and video in particular require complex global signaling & regional relays to manage jitter and packet loss. These are things that AWS, Azure, and GCP provide at global scale that, practically speaking, others (in the western context) don’t. 5/

reshared this

in reply to Meredith Whittaker

This isn't ‘'renting a server.' It's leasing access to a whole sprawling, capital-intensive, technically-capable system that must be just as available in Cairo as in Capetown, just as functional in Bangkok as Berlin. Particularly given the high stakes use cases of many who rely on Signal. 6/

Erik Jonker reshared this.

in reply to Meredith Whittaker

Such infrastructure costs billions and billions of dollars to provision and maintain, and it’s highly depreciable. In the case of the hyperscalers, the staggering cost is cross-subsidized by other businesses–themselves also massive platforms with significant lockin. 7/

Oblomov reshared this.

in reply to Meredith Whittaker

Meaning that infrastructure like AWS is not something that Signal, or almost anyone else, could afford to just “spin up.” Which is why nearly everyone that manages a real-time service–from Signal, to X, to Palantir, to Mastodon–rely at least in part on services provisioned by these companies. 8/
in reply to Meredith Whittaker

But even if Signal had the billions needed to recreate AWS, it’s not just about money. The talent to run these systems is rare & concentrated. The expertise, the tooling, the playbooks, the very language of modern SRE came out of these hyperscalers, and is now synonymous with 'the cloud.' 9/
in reply to Meredith Whittaker

o, yes, Signal runs on AWS. It also runs on your phone, which runs on iOS (Apple) or Android (Google). And on Dekstop, via Windows (Microsoft). Each of these presents similar dependencies on large entrenched tech companies, and concomitant barriers and risks. 10/
in reply to Meredith Whittaker

In short, the problem here is not that Signal ‘chose’ to run on AWS. The problem is the concentration of power in the infrastructure space that means there isn’t really another choice: the entire stack, practically speaking, is owned by 3-4 players. 11/
in reply to Meredith Whittaker

So, Signal does what we can to provide a service w integrity in the concentrated ecosystem we're working in. We protect your comms w end-to-end encryption, so that we can use AWS and others as a highway across which to send Signal data in ways that don’t let AWS, or anyone else, gain access. 12/

RFanciola reshared this.

in reply to Meredith Whittaker

To conclude: my silver lining hope is that AWS going down can be a learning moment, in which the risks of concentrating the nervous system of our world in the hands of a few players become very clear. And that this can help us craft ways of undoing this concentration and creating real choice ❤️ 13/

reshared this

in reply to Meredith Whittaker

Hello Meredith, all fair points of course, and I believe that many understood what happened. Isn't there a way to distribute the load in a fashion that it would not fail when US-EAST-1 at AWS is down ? (either with AWS itself or with other providers to balance the risks)

reshared this

in reply to Meredith Whittaker

Thank you for sharing your perspective. It is very clear and understandable. Are there any project/research started/ongoing at Signal or elsewhere that Signal contributes to in order to tackle that elephant in the room?
in reply to 🔜 eth0

@yawnbox I don't think you have a clear understanding of what you're talking about, and it might be fun for you to look a bit more deeply into how TOR works and its dependencies.
in reply to Meredith Whittaker

With respect Meredith, i’m talking about decentralized protocols and their capability to not depend so heavily on the service providers you’re arguing for. Tor Project has shown how possible it is (i used to work there, and it’s spelled Tor not TOR).

I listened to Moxie’s aversions to decentralization for years. That’s what I keep seeing now, with posts like these. I also understand the value of huge cloud providers, I’ve worked for many companies who use them, and have worked for them, and I understand why you depend on them and how important that is to a high quality service. Thank you for all that you all do.

But what conversations does Signal Foundation actually have on the topics of resiliency through decentralization? How much money could you save by allowing the community to take on aspects of the network? How much resiliency and trust could be gained, without losing performance?

reshared this

in reply to 🔜 eth0

@yawnbox Tor is basically a glorified network protocol (albeit very smart) so having it distributed by design is less of an issue.

I agree that making Signal more robust through decentralisation would be great, but this sort of thing gets more difficult the higher up the stack you go, especially when it wasn't part of the core design principles.

in reply to 🔜 eth0

@yawnbox How about a North American Signal, and a European Signal?

Those two could federate and if a government on either continent goes bonkers, it can at least not take down all of Signal.

in reply to David Penfold

@davep You can run video calls over jitsi.

IPv6 was supposed to solve NAT, so fewer servers would be needed. Supposed to.

@yawnbox

in reply to ArneBab

@ArneBab @davep @yawnbox IPv6 did solve NAT.

What it did not solve is the asymmetric firewalls that drop inbound unsolicited flows by default.

We kept that from IPv4 despite not really needing it for any real security purpose.

Because other reasons. Not technical ones.

in reply to ArneBab

@ArneBab @davep @yawnbox there's lots of alternatives that don't need the big players - but not for organisations that need to scale like Signal *and* are pretty small themselves.

Signal is and has always been a tradeoff between ease of use, onboarding and security/reliability.

And especially in an activist context both are important. Both are also important in order to provide secure communication to the masses.

But yes, it's also advisable for communities with any tech and org skills to create backup communication because centralisation always also creates power imbalances and threats.

But currently I'm happy if I can activists off Telegram and Discord 🙄

in reply to Hannah

@scatty_hannah I fully agree.

I’m always happy when parent’s groups at school use #Signal, because then we at least have reliable encryption and communicate outside the Meta/MS/Apple/Google walls.

And I have Signal Desktop, so I can actually contribute from the device I’m most comfortable with.

@davep @yawnbox

CC @Mer__edith to say: THANK YOU!

Questa voce è stata modificata (1 settimana fa)

reshared this

in reply to David Penfold

@davep @yawnbox Regarding Tor: instant messaging (if you stretch "instant" to cover several seconds which is acceptable in practice) have been successfully ran over Tor and other distributed settings.

Regarding video not relying on a centralized infra: Skype during its Kazaa-/pre-Microsoft- era and its "Super nodes" has been a widely successful example of a video calling software that doesn't rely that much on centralisation (but of course with a completely different security model)

in reply to DrYak

@davep @yawnbox (note: I am not saying that Signal is bad. Merely jumping in about centralisation. I actually appreciate Signal, e.g., unlike the above example of Skype, it is tolerating 3rd party open source clients, so people like me who neither run Android nor iOS on the smartphone can still communicate with friends).
in reply to DrYak

@dryak @davep @yawnbox I've run my Signal clients (mobile, desktop) over tor for years. For chat at least, it's rarely noticable. Calls and video struggle though.

reshared this

in reply to Meredith Whittaker

The reason AWS is affordable is because they are *still* subsidizing your invoices by 80%. When doing price comparisons assume that one day AWS will start charging 5x more once they have succeeded in killing the rest of the competition. All of them will. Im certain if AWS was charging what it costs to run that service that colo or any other option would be just as viable from a price perspective. They absolutely cannot compete on anything other than price. They are really bad at it
in reply to Meredith Whittaker

Maybe we should focus more on cloud interop, to reduce migration costs and enable better market dynamics? Too bad, EU is mostly just wasting money with their sovereignty initiatives…
in reply to Meredith Whittaker

That's not entirely true.

First and foremost, Signal chose to be a centralised walled garden globally operated by one monolithic company. It then required a hyperscaler as a consequence of this design decision.

in reply to Meredith Whittaker

I've been using #Signal from the very beginning (TextSecure times), and I've been advocating Signal a lot.

But the centralized architecture, instead of a federated decentralized approach is something I never liked. Also the focus on BigTech platforms (IOS, Android) is something I do not like. I'm using a #Librem5 #Linux phone, but there is no official primary client for Linux.

Still, I'm donating, but I would appreciate addressing centralism and #BigTech dependency.

#MobileLinux

in reply to Jan Vlug

I don’t believe federation is possible without leaking a huge amount of metadata, but I believe decentralisation is. It would be great to see Signal actively investigating the options in the design space that enable it.

The client side is a bigger problem. The choice of license has two major impacts:

  • Only Signal (who have a CLA and so are not bound by the license) can publish anything on the Apple App stores. This means that a legal injunction against Signal shipping the app in a country will cut off around half of the users in that country.
  • No one can integrate Signal with their back end systems. A load of people install WhatsApp or WeChat because some institution uses them to communicate with customers and then uses them to talk to friends because they’re already installed. I’d love for my bank to be able to communicate with me via Signal instead of POTS, for example, and then for Signal to benefit from the network effects: if the bank says ‘install Signal to communicate with us securely’ then that’s a few million folks who will have Signal installed already.

It is very rare for a protocol to become ubiquitous without a permissively licensed reference implementation.

Questa voce è stata modificata (1 settimana fa)
in reply to Jan Vlug

@janvlug Linux mobile userspace APIs is almost non-existant: no standardized push notification, no app lifecycle, no background app policy, no clear sleep/standby/dose policy, no call/ring system, no modern mobile-like audio routing system, etc.

We absolutely need Mobile Linux to succeed but we first need a working modern userspace before we can ask anyone to make apps for it (especially apps as complex as Signal with call, notif, background activity, etc.)

in reply to Meredith Whittaker

The problem is that signal is not running as a federated service. This makes you dependend on services like AWS and the like.

And there's another AWS/(any evil hosting service): As I understood #signal hashes phone numbers before uploading them to let accounts discover each other. The number space of phone numbers is not really big and having computing power and storage space at hand it shouldn't be too complicated to make a database to quickly access any phone number by its hash.

This information - using default signal settings - is exposed to super computing companies. This information allows to recreate the topology of the social network that is made of the millions of signal accounts.

in reply to Chris Vogel

@me
You might want to refresh your understanding about this, because that is not how signal has done it for years.

They have an article about "Private Contact Discovery" on their site.

in reply to Felix

Are you referring to the use of SGX?

My failure in understanding probably is that I do not understand how I could be certain an enclave really is what it looks like - remotely.

in reply to Meredith Whittaker

Signal on desktop also runs on Linux, which sounds quite right from the first look, BUT Signal on desktop is just a remote control of the phone-installed Signal app!

So you are still bound to Apple and Google.

That's another bad decision. It relates to the bad decision of using the phone number as ID.

in reply to Meredith Whittaker

Agree - if you want to run your service centralized. Neither my Mastodon nor my Matrix-server need anything but my own self-hosting. Of course they won't handle billions of concurrent customers - but a few tens of thousands similar to mine will. Together.

I simply don't think Signal being centralized is a good thing. It's your choice, but alternatives do exist and those do not need hyperscalers.

in reply to Troed Sångberg

@troed I don't think you have a clear understanding of this space, but I hope you have a good time digging in and learning more.
in reply to Meredith Whittaker

Thanks for your condescending reply. I used to manage global SaaS within fintech with nodes in GCP, AWS and Azure and on multiple different continents.
in reply to Troed Sångberg

Those explanations about how something like Signal is not possible or pragmatic without AWS or the other big players felt like gaslighting . Going as far as suggesting "mastodon" (meaning actually the fediverse) also requires AWS is disingenuous at best and malicious at worst, specially considering the CEO was using the fediverse to communicate about the Signal outage as it was happening. Arguing that you need to rely on Android (Google), iOS (Apple) or Windows (MS) to run the client is straight lying as one can use the desktop version to run on Linux and requiring a mobile app to sign up is a choice Signal did, a problem of their own making. Yes I know there is a lot of nuance but the end result is the same: trust has been lost.
Questa voce è stata modificata (1 settimana fa)
in reply to fiery

@fiery @troed #AWS *is* necessary if you're trying to make a large-scale centralized system, no? There aren't a lot of alternatives to that when we're talking about the level of scale that #Signal operates at.
in reply to casey is remote

@fiery Not only aws is not required to build a large scale centralized system but Signal is also is not necessarily required to be centralized.
in reply to fiery

@fiery
Interesting. I'm not aware of how many #AWS competitors there are so maybe I'm wrong.

That said, I don't disagree with you that #Signal shouldn't be centralized, it's one of the reasons I don't think I've ever used it.

in reply to casey is remote

@fiery Aws is not doing magic. Your compute still have to run on physical machines and the ones they have are not special. They also do not have to sit on Bezo's datacenter for large scale systems to work. Now if you are talking about their distributed systems' architecture, now it is not about centralized systems anymore, is it? Cloud is just a magic word that means other people's computers.
in reply to casey is remote

There certainly are cloud competitors to AWS. How easy it would be to use them would depend on what services Signal uses in AWS. Some will have equivalents, some may not. AWS, being around for so long has a boatload of services and it’s not in their best interest to make them easily movable.

But I absolutely get why something like Signal would use a cloud provider. Could it be done entirely on-prem? Quite probably. However could they do it within a business model that would allow the scale of users to use it as they have today without charging significant fees to use it? I highly doubt it. This would hold true for anyone wanting to build a service like theirs that would operate on the their scale. The bandwidth and other infrastructure would be immense and super expensive to buy and maintain. The only folks able to provide that would be big telco, tech companies.

Could it be all decentralized ala the Fediverse? Sure and such services exist. But, much like the Fediverse, getting user adoption would be much more difficult and tour audience would be those tech savvy enough to use what’s already out there. I mean, for example, Matrix/Element exists. Quite secure, very decentralized. But it’s not for the general public.

in reply to midway

You are comparing "Cloud" (in this context actually meaning PaaS) to owning your own datacenter as if they were the only options possible, but there is a whole world of options and combinations of options that are not either of these two extremes. I keep getting surprised that so many people actually believe that owning your own datacenter and equipments is the only alternative to so-called "cloud" providers.
in reply to fiery

I didn't mean to put it that way. I mean peer-to-peer is certainly a thing. And we have systems that do that....and they are WAY too complex and cumbersome for the average user to use...see Matrix as a classic example. Quite secure, very decentralized, but not simple enough for most people to use. Heck, even here on the Fediverse, the user base is quite limited because of the decentralized nature is just too much for most folks to grasp..throw real privacy and zero trust encryption on top of it and your app will never take off.

Therefore, if you actually want users, you're going to have some amount of centralization. That means you need to run on something, either your own gear or someone else's. And at the scale that Signal wants to run, cloud makes sense not just for compute and services, but also the sheer amount of bandwidth needed to process the amount of data they want to send.

Can it be done a different way? Sure. Will those methods scale to the reach the average user? I seriously doubt it.

in reply to midway

Now you are talking about something else completely. You are making the point that centralization somehow improves UX. You'd have to substantiate that better.
in reply to fiery

Yeah, well the conversation has several branches.

Centralization simplifies how thing work in general, especially for end users. You have one place to go where you set up your account and work from single experience. There's a reason why every successful service our there has some level of centralization. It's just easy to use. Ease of use beings in more users which helps the service survive.

Decentralization has some great advantages. But with that comes complexity and with complexity comes a lack of adoption. The lack of adoption means that there's no money in it. And that's great if you're a hobbyist, but not if you're a company.

An easy example is social media. Look at all of the massive services. They are all centralized. Look at a decentralized system like the Fediverse. Yes, it's very decentralized, but the audience is very limited.

Now let's take this back to Signal which was the whole point of the thread. Yes, it has some centralized services. Those centralized services make the system work well enough that average internet users would actually use it. There are decentralized options out there. They work peer to peer so there's no need for things like cloud infrastructure or a big data center to run them. Matrix/Element comes to mind. Super secure, decentralized messaging. Very few people use it because it's just too complicated for the average or even above average user.

So if I'm Signal, a company that wants to build a more secure messaging app, I'm going to make some compromises in order to make it acceptable and palatable to a wide audience so I have a chance to make some money and keep my companhy afloat. Thus, something like AWS makes sense. I can get access to huge resources to handle any user load, but my costs scale in real time with my usage. This is sensible. But there are trade-offs. But i think for what Signal is trying to do, those trade-offs make sense.

in reply to midway

You are mixing many different concerns here. First, we got define better what we are talking about when you say "centralized". That can be many things. The user does not have to even see this to use a service. Case in point: facebook, twitter/x, tiktok and other are ALL decentralized services. In the sense that they are distributed systems split in many parts, running across many machines. How do I know that? Because no computer exists nowadays that could run them on a single machine. Yet users are kept blissfully unaware of that as they should. Signal is ridiculously small compared to those social media. There is no reason a messaging service like signal could not be the same and yet be decentralized internally. Even amazon itself is not internally a centralized system in any sense of the word. They are highly distributed internally and offer plenty of options for redundancy. And yet Signal was down when ONE REGION of aws was down. That kind of centralization serves no purpose and is just bad engineering. No one would be harsh at signal had they owned up to it and said, "yeah, that was bad, we need to do it better". But no, their leadership went on condescending everyone, telling that they do not understand the problem space. That was just bad. Mind you, signal is still my primary communicator and I still donate to them monthly, while I am still using it. But when a CEO earning upwards of 700k usd a year gives that kind of response to the public, that is making me reconsider. Trust has been lost, something is off.
Now another point is that non-centralized does not necessarily means peer-to-peer. One such highly successful example is email, which is federated. Yes, most users will just gravitate to some centralized offering like gmail or hotmail, but the system is still interoperable for folks or companies who want more control or even self host. We have options, based on public standards. In that sense even instagram is being more open than signal, in the sense that they now have threads which talk to the fediverse. Signal is openly against any such federation arrangement, thus reducing the power that users have over their own data. They do not even have good export options, arguing that would reduce security. Yet they require a mobile number to sign-up which in most places already doxx the user.
in reply to fiery

If you are defining a centralized service as one that runs in a single system, then this has ceased to be an adult conversation, especially here on the Fediverse.

I get only running in one region is a vulnerability. It could be bad engineering…it could also be because of cost. Resiliency isn’t free or necessarily cheap, especially for a company that relies on donations. It’s great that you donate to Signal but I assure you the vast majority of their traffic is sent and received by people who don’t.

I made the point about running in the cloud or on prem because that was part of the pro original post (at least as I remember it…it’s been a while). The email model is essentially peer to peer. It relies on lots of places agreeing on a standard to send messages. The issue with this is that to make that work requires dumbing down the standard and would likely break the goal of an all like signal. Email is not in any way secure. Quite the opposite in fact. Are there ways to make it more secure? Yes. But there is no agreed to standard to do so and thus this feature has not been widely adopted. The way email has gone is to become more and more centralized every day with a handful of companies providing email whose business models do not want secure email. The email market has decided that free is better than secure. The price of free is the provider reads your email to sell your information. I only went down this rabbit hole because Signal won’t want to adopt this model because doing so kills their entire reason to exist. Their compromise is that they handle and procrss the

in reply to Troed Sångberg

@troed Than you, obviously, should have no problem setting up an alternative with the same features and sizing as signal 👍
in reply to Tilman

@gilbus @troed i sincerely do not understand why making fun of someone's opinions, who is at least aware of the scale of the problem. I see several mocking and condescending replies in this thread, usually directed to genuine concerns about how to understand and maybe improve Signal resiliency. All the IT persons in this discussion are pretty aware that running this operation is difficult. Everyone using Signal is certainly grateful to Meredith and the Signal Team. Nevertheless, there is no point in building a community based on open source software, asking for funding, and then mocking or downplaying an open discussion about alternatuve models. This is not welcoming nor even honest. The AWS outage was real and is concerning, so the least we can do is have an honest conversation in order to rebuild our sense of trust
in reply to Meredith Whittaker

@troed This is a really shitty reply, especially when multiple experienced people are expressing the same opinion.
in reply to Jade

@JadedBlueEyes @troed I'm sorry if it landed harsh.

First, I don't think not knowing things is inherently bad or shameful--it's where learning starts, etc. Second, there's a misunderstanding here, whoever is expressing it: decentralization at the level of a protocol--ActivityPub or w/e else--is NOT the same thing as decentralization of infra. People running mastodon instances, or Matrix servers, or other fedi systems, are also in most cases leasing infrastructure from hyperscalers to do so.

in reply to Meredith Whittaker

@JadedBlueEyes @troed in reality the hyperscalers barely register. See fedidb.com/stats and blog.benjojo.co.uk/post/who-ho… for more details. Hosted from people's homes likely outnumbers all of the hyperscalers combined.

Leonardo reshared this.

in reply to Jonathan Cremin

@jonathan @JadedBlueEyes @troed that doesn’t change the fundamental point though; you can run a mastodon server on a raspberry pi but you cannot run something like signal without using at least 1 of about 3 or 4 american tech companies
in reply to gory 🎃

@repeattofade

I don't know if we're having the same discussion. No, you cannot run a centralized service like Signal without doing so - but since no one is claiming that either I'm not sure what your point is.

You can however run something like Signal that's decentralized. We know this, since it exists. It's called Matrix, and many people in the Fediverse also run Matrix instances.

@jonathan @Mer__edith @JadedBlueEyes

in reply to Troed Sångberg

@troed @jonathan @JadedBlueEyes I feel we all understand the landscape, what exists and why

this just feels like a really unproductive, unhelpful thread from foss decentralised self-hosting absolutionists, trying to say they understand how to run signal better than its president

use matrix, by all means; try getting your family and friends to use it too. good luck. “perfect” really can be the enemy of good (or in this case, privacy).

in reply to gory 🎃

@repeattofade

So far it seems Meredith does not know how decentralized service like the Fediverse and Matrix work (the claims that most use hyperscalers). No one is however claiming that we know how to run _the centralized service Signal_ better. We're saying maybe don't be centralized.

"try getting your family and friends to use [Matrix] too. good luck."

Thanks, yeah, the whole family does - including my elderly parents. It seems you might not know the subject you're having opinions on?

@jonathan @Mer__edith @JadedBlueEyes

in reply to gory 🎃

@repeattofade @troed @JadedBlueEyes those are great arguments, but the one Meredith is taking on this thread is "look, Mastodon can't/doesn't do distributed infra" when the data says that actually yes it does.

I actually don't have a strong view on the centralisation of Signal, but seeing Meredith talk down to people (see replies on this and other threads) and then be wrong on the facts is pretty galling.

in reply to Jonathan Cremin

@jonathan @troed @JadedBlueEyes i’m not sure I’d class either cloudflare or fastly as decentralised providers, and I’d consider them as hyperscalers in their own right (albeit distributed PoPs)

while I do believe most mastodon servers are self-hosted, i find the metrics from that site entirely questionable and seem to be based off who owns the IP that responds to requests (including pass-through CDNs) rather than any actual realistic numbers for where the server lives

in reply to gory 🎃

@repeattofade when ActivityPub instances call out to other nodes, you can see their real IP. The 2024 blog post I linked uses that to break down the otherwise masked instances. I've attached the relevant graph here.

Cloudflare and Fastly aren't considered Hyperscalers, and certainly not in this context where they may serve but don't host the data.

@troed @Mer__edith @JadedBlueEyes

in reply to Jonathan Cremin

@jonathan so about half are definitely using some kind of hosting service rather than at home?
in reply to gory 🎃

@repeattofade yes. Though some may be using gateways to also mask outbound traffic, I expect that to be a really small number.

The original argument wasn't about how many people were hosting at home though, it was that "most" people use Hyperscalers therefore you can't expect Signal to not use them.

The largest instance on the Fediverse (mastodon.social) is hosted on Hetzner, which while large in scale does not have the sophistication of a Hyperscaler.

in reply to Jonathan Cremin

@jonathan i feel like this thread has diverged into which companies we considered to be hyperscalers or not which isn’t really the intent or the point. I read her post as meaning “managed datacenter”.

the sad reality is that whether you’re hosting a small server for your friends or trying to run a service used by millions, realistically you can’t run the infrastructure yourself reliably or effectively, which endangers the internet and its future in general

in reply to Meredith Whittaker

nearly everyone that manages a real-time service–from Signal, to X, to Palantir, to Mastodon–rely at least in part on services provisioned by these companies


Mastodon doesn't, though?

There certainly will be servers hosted on AWS but when AWS went down, most Mastodon instances stayed up, and people were cracking jokes at more centralized platforms.

in reply to datum (n=1)

@datum Mastodon is distributed at the level of the protocol, not infrastructure. Sure, some people use a server in their closet, but most license hyperscaler infra to host their mastodon instance.

Meta note, we seem to be dealing with a confusion in what the term "distributed" means in this context.

in reply to Meredith Whittaker

What if, instead of running a global comms platform for millions of people that requires AWS level infrastructure, we run a bunch of small, local ones that all federate and interop with each other? 😍
in reply to Daniel Gultsch

@daniel Even _IF_ it were possible to create a black box version of "distributed Signal mesh node in a box" that you could run in your basement to help make Signal more tolerant - I mean with enough $ and willpower Im sure it could be done - there's still the question of: if you don't control physical access to the node, there's still potential for attack regardless of how much encryption and protection. Would you ever be able to trust it completely?
in reply to Third spruce tree on the left

@Third spruce tree on the left @Daniel Gultsch @Meredith Whittaker I'm quite sure that I have more physical access control to the xmpp server that I hope to have running in my office at home in a few weeks than to any AWS node, so that would already be an improvement.

also, if somebody is willing to break into my home to get access to the updates on how often the neighborhood cat has been fed, I want to congratulate them on their priorities.

unless it's the cat himself. in that case “get out, you're not allowed in this room, because it's not cat safe, and *how* did you even manage to get in?”

in reply to Third spruce tree on the left

@Third spruce tree on the left thankfully *that* particular failure mode can't happen (fanless SBC), but now I've spent too many minutes working on an hypothetical scenario where “hungry cat with hacker skills” is part of the thread model, and I am worrying for my own sanity just a bit 😁
in reply to Meredith Whittaker

looking at your replies to replies here that seem to make sense to me (especially re decentralization), you're telling them they don't know what they are talking about. well I definitely don't.

like with debates re #ATproto and #ActivityPub, I have thoughts but I know that we really need to see the experts debate each other more somehow. I don't think it happens enough. so I'd say the same re #signal and #matrix etc.

Questa voce è stata modificata (1 settimana fa)
in reply to william.maggos

@wjmaggos meredith gets a lot of replies that could be answered with a little bit of research or could be answered by anybody, which may explain the short replies; but i can try to answer you

@Mer__edith

in reply to xyhhx 🔻

@wjmaggos what meredith is explaining is the scope of the infrastructure that signal absolutely needs in order to provide the service it does at the quality it requires, and that there are extremely few options that satisfy those needs

to say building their own infra would be prohibitively expensive wouldn't begin to describe it

@Mer__edith

in reply to xyhhx 🔻

@wjmaggos signals threat model and security guarantees can't be met with decentralization like matrix, fedi, or atproto, either. when disparate servers communicate, they have to know how to relay messages between each other, which leads to a lot of metadata leakage (as is the case with matrix)

tor likewise has mitigations for time based correlation attacks, which are great for its use case; but would cripple signals quality

@Mer__edith

in reply to xyhhx 🔻

@xyhhx @soop
I appreciate your replies and am annoyed at the trolls replying to you.

but there's no substitute for knowledgeable people on different sides going back and forth on a subject, in good faith. hopefully not just in text, with questions and fair moderators.

in reply to william.maggos

i don't mind a little trolling 😌 i thought it was funni

@soop @Mer__edith

Questa voce è stata modificata (1 settimana fa)
in reply to william.maggos

@wjmaggos This is perhaps a thing @404mediaco could do, a writeup Q&A or a documentary; a long form debate between CTOs of selected messaging services.
in reply to Meredith Whittaker

not so surprising, as it's very difficult to do anything at any scale online and avoid AWS entirely.

The surprise shouldn't be about Signal, it should be a rallying cry to build diverse infrastructure.

Unknown parent

mastodon - Collegamento all'originale
Richie McCoy aka Dr Deej
@debacle @dryak @davep @yawnbox There is a desktop version. You need a phone to use it though.
Unknown parent

mastodon - Collegamento all'originale
DrYak

@debacle @davep @yawnbox The Signal client I use is specific to #SailfishOS , it's WhisperFish:
openrepos.net/content/rubdos/w…

(I don't know about other Linux mobile distributions).

Unknown parent

mastodon - Collegamento all'originale
DrYak

@debacle @davep @yawnbox There's a list here:
github.com/exquo/signal-soft/w…

Gurk uses the same rust library as WhisperFish.

Also, the multi-protocol Pidgin has plugin for Signal.
(Then there's also a bridge for the Matrix protocol.)

Joe Vinegar reshared this.

Unknown parent

mastodon - Collegamento all'originale
DrYak

@debacle @davep @yawnbox I am rather happy with it (though there are occasional hiccups -- my account got accidentally deleted, I need to re-create it). I only use it for messaging, I have no idea how far Rubdos got with the implementation of calls.

I would recommend if you happen to run SailfishOS on your phone and if you too are mostly interested in messaging.

Joe Vinegar reshared this.

Unknown parent

mastodon - Collegamento all'originale
Nicoco
@debacle @dryak slidgnal bas been revived! No groups yet, but 1:1 basic and cool features work. At least that is what @alex says, I have zero signal contacts and haven't tested it much yet. ^^