Page 2 of 4

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Mon Jan 18, 2021 10:52 am
by Midas
Topic update: Signal Desktop latest release is v1.39.5 (changes and downloads at https://github.com/signalapp/Signal-Desktop/releases).

Signal appears to have benefited the most after the recent WhatsApp debacle (and some celebrities endorsement):

WhatsApp changes: Signal messaging platform restored after surge prompts outage
https://www.bbc.com/news/technology-55684595

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Sat Jan 23, 2021 1:59 pm
by rbon
webfork wrote: Thu Sep 12, 2019 10:06 am I am a fan and active user of this program overall but I don't expect to see much in terms of a portable version portable version as this appear to be a priority: https://github.com/signalapp/Signal-Desktop/issues/1710 ...
Signal Portable released at January 21, 2021
• author web site: https://portapps.io/
• Signal Portable page: https://portapps.io/app/signal-portable/
• GitHub project page: https://github.com/portapps/signal-portable
• GitHub download page: https://github.com/portapps/signal-portable/releases
• direct download file 'signal-portable-win64-1.39.6-1-setup.exe': https://portapps.io/download/signal-por ... -setup.exe
• portable build based on release: 1.39.6
• portable installer size: 146 MB
• GitHub Signal Desktop: https://github.com/signalapp/Signal-Desktop (only source code)

Modifications to ensure portability

Code: Select all

• Following switches are passed to the process.
   --user-data-dir=<data_path>: Directory where the Electron stores the user data. <data_path> is dynamically generated at launch.
• Check for updates disabled
Note:
• the portable installer is highly recommended.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Sun Jan 24, 2021 4:39 am
by Midas
Just to clarify: official Signal is currently v1.39.6 (changes and source download at https://github.com/signalapp/Signal-Desktop/releases).

Signal Desktop for Windows downloads are at https://signal.org/download/windows/.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Sun Jan 24, 2021 9:22 am
by webfork
rbon wrote: Sat Jan 23, 2021 1:59 pm author web site: https://portapps.io/
I've been using the portapps.io discord program for some time with good results, so that client may be a good option for an eventual entry.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Mon Jan 25, 2021 8:46 pm
by webfork
Ran some testing ...

Steps: I downloaded the 7z version from the releases page because it's about 30 megs smaller. The program is massive no matter what you do. Extract to a folder of your choice and launch signal-portable.exe

Status: Portable, Stealth: no, writes empty folder: \AppData\Roaming\Signal\Dictionaries

Resource usage: 138 RAM, 500 megs disk space (356 megs with NTFS compression)

Security note

The primary reason to use Signal vs other options (especially Telegram) is the high energy put towards a combination of simplicity and strong security/privacy. If you're seeking out this program for those reasons, it might make sense to run the official client and not mess about with a non-standard version like this. For example, if you're someone who's checked their wireless router for uninvited guests, you probably want to just use the standard installer or run it inside Windows Sandbox.

Both installer and portable write minor items to the registry that make it clear Signal was formerly on the computer, so it might qualify as stealth in terms of the site, but even basic computer analysis could tell that Signal was installed. Again, running inside Windows Sandbox might be the best way to keep installation quiet.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Tue Jan 26, 2021 5:04 am
by Midas
Some further insight on Signal growing pains...

Tens of millions of users began seeking alternatives to Facebook’s suite of products. Among the biggest beneficiaries has been Signal, the encrypted messaging app whose development is funded by a nonprofit organization. Last month, according to one research firm, the six-year-old app had about 20 million users worldwide. But in a 12-hour period the Sunday after WhatsApp’s privacy policy update began, Signal added another 2 million users, an employee familiar with the matter told me. Days of temporary outages followed.
@ www.theverge.com/22249391/signal-app-abuse-messaging-employees-violence-misinformation


BTW, while open sourced Signal Desktop is still Electron-based, hence the bloat...

For scale, note that Telegram has over 500 million users. Its single executable natively portable desktop client presently weighs 68MB.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Tue Jan 26, 2021 7:59 am
by webfork
...in a 12-hour period the Sunday after WhatsApp’s privacy policy update began, Signal added another 2 million users, an employee familiar with the matter told me. Days of temporary outages followed.
I use Signal frequently and haven't seen any system issues past two days around when the article mentioned the network was expanding. It's reliability has been excellent through a long list of networks, connections, and nationalities.
BTW, while open sourced Signal Desktop is still Electron-based, hence the bloat... Its single executable natively portable desktop client presently weighs 68MB.
At least in terms of features vs. size, Telegram is clearly the better choice.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Tue Jan 26, 2021 3:54 pm
by hamasaki
Telegram is pretty slick, both with the portable version and the mobile version. Being able to add multiple accounts in the same interface is terrific. Signal is fine though, we use it a lot here in Hong Kong. They've ironed out a few bugs in the last few weeks and it seems more reliable now. Going from WhatsApp it's an easy transition as Signal is very similar and easier to use. I prefer Telegram though personally.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Wed Jan 27, 2021 9:36 am
by webfork
hamasaki wrote: Tue Jan 26, 2021 3:54 pm Signal is fine though, we use it a lot here in Hong Kong. They've ironed out a few bugs in the last few weeks and it seems more reliable now.
That's definitely a good test.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Wed Jan 27, 2021 10:41 am
by Midas
webfork wrote:
hamasaki wrote:Signal is fine though, we use it a lot here in Hong Kong.
That's definitely a good test.

I fully agree.

Sligthly OT, but wasn't there a topic devoted to Riot.im messenger? If memory serves, it had e2e encryption, too...

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Wed Jan 27, 2021 11:22 am
by webfork
Midas wrote: Wed Jan 27, 2021 10:41 am ... wasn't there a topic devoted to Riot.im messenger? If memory serves, it had e2e encryption, too...
No dedicated thread yet, and you'd be forgiven for asking because there were already a few tools with the name "Riot" so it doesn't come up clearly even in a careful search. Also the messaging tool got renamed "Element", I think connected to all the social unrest here in the States. Nevermind that it's technically a client for a kind of IRC replacement/extension called "Matrix." Not exactly a group of terms that stand out in a standard web search.

Unlike a lot of other options, it is open source and does seem to have good security/privacy policies so it's definitely something I'd be open to using. We discussed it's possible use as a chat/social option for TPFC folks vs the current Discord channel.

EDIT: I'm reasonably sure the client is yet another non-portable Electron client, looks like portapps also has a package for Element: https://github.com/portapps/element-portable

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Wed Jan 27, 2021 11:36 am
by Midas
webfork wrote:We discussed it's possible use as a chat/social option for TPFC folks vs the current Discord channel.

Yep, I just found out about the name change and was coming to add something about it, but couldn't find anything other than that topic. FWIW then:

[Element is an] All-in-one secure chat app for teams, friends and organisations. Keeps conversations in your control, safe from data-mining and ads. Talk to everyone through the open global Matrix network, protected by proper end-to-end encryption.
@ https://element.io/

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Thu Jan 28, 2021 11:54 am
by rbon
webfork wrote: Mon Jan 25, 2021 8:46 pm Status: Portable, Stealth: no, writes empty folder: \AppData\Roaming\Signal\Dictionaries
Use the cleanup setting to cleanup leftover folders on close. :wink:
-> see at GitHub issue nr. 1 https://github.com/portapps/signal-portable/issues/1
-> see at Portapps.io https://portapps.io/

Signal Portable: https://portapps.io/app/signal-portable/
Configuration

Code: Select all

Signal portable can be configured through the main YAML configuration file:

app:
  cleanup: true
• cleanup: Cleanup leftover folders (default false)
YAML configuration file: https://portapps.io/doc/configuration/
Each portable application can be configured through a simple YAML configuration file named [appname]-portable.yml.

This file is generated at first launch as a sample file named [appname]-portable.sample.yml. Rename this file [appname]-portable.yml and it will be used at runtime. It contains all fields available to configure the application.
Here is an example with Firefox:

Image

Code: Select all

common:
  disable_log: false
  args: []
  env: {}
  app_path: ""
app:
  profile: default
  multiple_instances: false
  disable_telemetry: false
  disable_firefox_studies: false
-> See on site other parameters of YAML configuration file.

B.T.W.
YAML configuration file is a simple text file (ascii) and works similar to [appname]portable.INI in PortableApps packages.

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Fri Feb 19, 2021 1:24 pm
by Midas
Signal Desktop v1.40.0 released 2021-02-17 (changelog at https://github.com/signalapp/Signal-Desktop/releases).

Re: Signal - cross-platform secure messaging (64-bit only)

Posted: Thu Apr 01, 2021 1:26 am
by Shown
hamasaki wrote: Tue Jan 26, 2021 3:54 pm Telegram is pretty slick, both with the portable version and the mobile version. Being able to add multiple accounts in the same interface is terrific. Signal is fine though, we use it a lot here in Hong Kong. They've ironed out a few bugs in the last few weeks and it seems more reliable now. Going from gbwhatsappWhatsApp it's an easy transition as Signal is very similar and easier to use. I prefer Telegram though personally.
I hope there is no problem to post my first post here because yesterday when I register I submitted a post in chit chat section of this forum and when I login into forum today my post doesn't not appear where I post it, so I am starting from here.


The big things as I see them:

Signal is always end-to-end encrypted. Telegram isn't unless you use secret chats. Group messages are not encrypted.

Telegram uses proprietary encryption (once enabled). This is considered bad practice by security professionals.

Signal's server code is open source as well as it's app code meaning its entire code base can be peer reviewed and scrutinized for issues. Telegram's server code is closed source and proprietary. Their app code is open.

Signal is entirely non-profit and funded by donations.

Signal stores as little metadata and user info as possible, less than Telegram.