cross-posted from: https://lemmy.world/post/12200311

Signal Finally Rolls Out Usernames, So You Can Keep Your Phone Number Private

you are viewing a single comment's thread
view the rest of the comments
[+] 34 points 2 years ago* (last edited 1 year ago) (4 children)
  • [–] 6 points 2 years ago

    Jami doesn't require a phone number, which is p2p. Xmpp (+ Omemo) doesn't require a phone number and it's federated... I mean, if a service is willing to rid of phone numbers, it'll do totally without them.

  • source
  • parent
  • [–] 3 points 2 years ago (1 child)

    The challenge of having your device solve a nasty PoW that takes minutes would not deter most people: a timer once is better than evil captchas, phone numbers, etc. I don't understand why they use hCaptcha and not that.

  • source
  • parent
  • hideshow 2 child comments
  • [+] 10 points 2 years ago* (last edited 1 year ago) (1 child)
  • [–] 0 points 2 years ago

    A lot, but farming phone numbers from poor countries is also cheap and Signal sends them insanely expensive SMS. There is no perfect solution, spammers aren't stupid. Since Signal is centralised they can enforce PoW incrementally if they get reports for spam, I still think it is way better than hCaptcha which is garbage.

  • source
  • parent
  • [–] 1 point 2 years ago (1 child)

    phone numbers for spam prevention are a bandaid for a mediocre solution. the mediocre aspect being that it's totally centralized when it should at least be federated like SimpleX. SimpleX is the ultimate solution to be honest with you, it's federated, fast, extremely private and extremely secure.

  • source
  • parent
  • hideshow 2 child comments
  • [–] -2 points 2 years ago (2 children)

    It’s the signal metadata that they want to keep associated with an identity

    They still can fulfill government requests for who is talking to who and how often

  • source
  • parent
  • hideshow 4 child comments