HN user

finnn

2,652 karma
Posts97
Comments436
View on HN
www.privateinternetaccess.com 8y ago

Crazy new Swedish bill makes sharing music and TV as bad a “crime” as manslaughter

finnn
93pts68
letsencrypt.org 8y ago

Looking Forward to 2018

finnn
6pts1
www.thestranger.com 8y ago

Washington State AG Bob Ferguson Sues Uber Over Data Breach

finnn
2pts1
boingboing.net 8y ago

Researchers craft Android app that reveals spyware; barred from doing so on iOS

finnn
2pts0
livepeer.org 8y ago

Livepeer: An Open Platform for Decentralized Live Video Broadcasting

finnn
2pts0
www.muckrock.com 8y ago

Is the FBI not fulfilling their responsibilities under FOIA?

finnn
5pts0
www.kb.cert.org 8y ago

Savitech USB audio drivers install a new root CA certificate

finnn
406pts179
www.muckrock.com 8y ago

In some Louisiana parishes, over half of inmate phone fees go back to the prison

finnn
2pts0
sslmate.com 8y ago

Certificate Transparency Log Monitor

finnn
2pts0
signal.org 8y ago

Read receipts are coming to Signal

finnn
3pts0
www.weboftrust.info 8y ago

Rebooting Web-of-Trust

finnn
1pts0
theintercept.com 8y ago

Trump Administration Lobbying Hard for Sweeping Surveillance Law

finnn
3pts0
www.reddit.com 8y ago

Today We're Testing Our Chat Beta

finnn
1pts0
signal.org 8y ago

Encrypted profiles for Signal now in public beta

finnn
2pts0
www.wired.com 8y ago

The Army Grounds Its DJI Drones Over Security Concerns

finnn
5pts0
www.reddit.com 8y ago

Reports of AT&T intercepting and re-signing TLS

finnn
31pts3
www.wifibeat.org 8y ago

WiFiBeat: Store 802.11 Frames in Elasticsearch Visualize with Kibana

finnn
2pts0
arstechnica.com 9y ago

Google drops the boom on WoSign, StartCom certs for good

finnn
1pts0
www.washingtonpost.com 9y ago

Travelers just won back a bit of their privacy at the border

finnn
94pts102
news.dieweltistgarnichtso.net 9y ago

VBScript Injection via Gnome Thumbnailer

finnn
2pts2
www.troyhunt.com 9y ago

Life Is About to Get Harder for Websites Without HTTPS

finnn
286pts351
www.wired.com 9y ago

Designing Genderless Emoji? It Takes More Than Just Losing the Lipstick

finnn
2pts1
www.michaelgeist.ca 9y ago

Why Clicking “I Agree” May No Longer Mean You Agree to Everything

finnn
2pts0
www.wired.com 9y ago

A Scary New Ransomware Outbreak Uses WannaCry’s Old Tricks

finnn
2pts0
www.wired.com 9y ago

The Supreme Court Just Protected Your Right to Facebook

finnn
2pts0
theintercept.com 9y ago

Counterterrorism Tactics Used at Standing Rock to “Defeat Pipeline Insurgencies”

finnn
4pts1
www.reddit.com 9y ago

Comcast xFI reportedly blocking devices that attempt to connect to tor

finnn
1pts0
www.eff.org 9y ago

EFF on the Government’s Plan for Vehicle-To-Vehicle Communication

finnn
6pts5
daringfireball.net 9y ago

On Uber’s ‘Identifying and Tagging’ of iPhones

finnn
5pts0
github.com 9y ago

OpenSnitch is a GNU/Linux port of the Little Snitch application firewall

finnn
3pts0

ah yes, another fork of BirdSiteLive. Every one seems to make their own fork of that thing. And none of them (that I've found) set a user agent when delivering messages to other AP servers.

You can see where bird.makeup sets the headers here[0] (with a distinct lack of user agent) and an issue I filed against the upstream[1] asking them to please set a user agent.

[0] https://git.sr.ht/~cloutier/bird.makeup/tree/master/item/src...

[1] https://github.com/NicolasConstant/BirdsiteLive/issues/188

oh wow HN is parroting this bullshit again.

Moxie and Signal didn't do anything other than asking LibreSignal politely to stop using their servers. They didn't "shut down" anything, and they have shown no interest in shutting down signal-cli/signald.

MobileCoin, the cryptocurrency that Signal incorporates and essentially sanctions, uses signald for their bot[0].

the Signal Matrix bridge has hundreds if not thousands of open source users, plus Element One and Beeper users, all using signald and not having any repercussions for years. The only 3rd party Signal client that's caught any flak from Signal that I'm aware of is LibreSignal.

also see: last time this came up[1]

[0] https://github.com/mobilecoinofficial/mobot/blob/dev/RUN.md

[1] https://news.ycombinator.com/item?id=27682490#27683374

We know the policy, no one is confused about the policy, all 3rd party clients violate the policy.

Is the policy enforced? I've seen no evidence of it.

I'm looking for people's experience interacting with the Signal server, not moxie. We're talking about if the server enforces any kind of client restrictions.

I haven't looked super deep, but to the best of my knowledge that's not something that happens really. I looked through that reddit thread (thanks for that BTW, whisperfish seems interesting) and skimmed over that enormous GitHub thread, but I couldn't find much in the way of people actually experiencing issues interacting with the Signal server. Again, would appreciate it if you could link me to such a thing. As I mentioned elsewhere, I maintain an unofficial signal client and I try to be aware of these sort of things.

Sorry what am I looking for in this 200 comment reddit thread? I don't see any comments from moxie himself, just a lot of other people claiming to know what moxie wants. Are there reports of specific issues with 3rd party clients or comments from a Signal employee or something?

signal-cli uses a clearly identifiable user agent [0] that could easily be blocked if Signal wanted to. signal-cli could escalate by trying to evade that kind of a block, but as it stands signal-cli has been operating without trouble for several years.

I meant they may ask some clients not to use their servers, but they don't have any enforcement mechanism in place beyond asking them to stop on github.

[0] https://github.com/AsamK/signal-cli/blob/05abb3f9f6294677d2d...

I said it's not enforced.

I cannot speak for moxie or Signal. I can speak for my own experiences, as the maintainer of a fork of signal-cli, and I have never seen any evidence that Signal's servers block signal-cli or my fork. I don't know about signal-cli but my fork clearly identifies itself in the user agent (and another field called the "signal agent") to the server. If they wanted to block me they could.

edit: signal-cli also sets a user agent clearly identifies itself: https://github.com/AsamK/signal-cli/blob/05abb3f9f6294677d2d...

It's not a licensing restriction, it's a terms of use for their network service. It's also not enforced. Their clients are open source, signal-cli uses a fork of the Android app's client library.

This daemon handles as much of the weird signal-specific stuff and exposes an easier to use API. It handles things like encrypting and decrypting messages, generating and storing keys, syncing with linked devices and a bunch of others.

signald doesn't really "trigger actions" or anything, but it would be pretty easy to write something that does using it.

signald author here, open to suggestions on that name. As you've noticed, I try to avoid using the word "signal". I do agree that the current name is pretty awkward.

edit: the name for signaldctl. I'm not looking to rename signald at this time