How I'm now using Signal on UT
-
@pparent said in How I'm now using Signal on UT:
Am I wrong to believe that this technique ruins end-to-end encryption and that the matrix server that acts as a relay ( here @signalbot:tchncs.de ) gets to access all your messages unencrypted?
I'll be honest: I don't know! As far as I know it replaces the Signal encryption by Matrix encryption, so I guess it could, in theory, snoop? But I'm not an expert.
In any case, if you're worried about that it's probably better not to use this method. -
Well I'm not sure, but it seems like the signalbot server : tchncs.de is the one who connects to signal, and fetches messages, decrypts them, and then redirects them through matrix. So they get to have the possibility to see unencrypted messages, which voids a bit the utility of signal.
One interesting thing would be to be able to host the matrix bridge at home, or even on the phone itself, but seems a bit complicated.
-
@pparent said in How I'm now using Signal on UT:
it seems like the signalbot server : tchncs.de is the one who connects to signal, and fetches messages, decrypts them, and then redirects them through matrix. So they get to have the possibility to see unencrypted messages, which voids a bit the utility of signal.
If the encryption matters to you, then it does. I think you should only use a bridge if you feel you can trust the person who hosts it.
And yes, hosting it yourself is an option, but that's more work / a bit more complicated. A loss of convenience is often te price we pay for privacy / security.
I don't think it can be done on the phone. But I've never looked into it.
-
@Sander I removed and re-bridged whatsapp and messages are already decrypted so, it worked! Big thanks for the support
-
@Marcos May I ask, how do you remove a bridge? I couldn't find much info on that? I think of re-doing my signal bridge since somehow I get no notifications but an unread counter of 1. Something is stuck somewhere.
-
Hi @pparent
You have the possibility to host the bridge at home as far as I can tell.
That's the beauty and magic of Open Source Software...Of course it requires some time and efforts. One has to make their own security/privacy assessment.
-
@danfro I do not fully remind the details but what I did was:
1- Erase all the app data on the UT Cinny (using UT Tweak Tool)
2- Remove the whatsapp bridge from Beeper (I had it installed on another phone to confirm the bridge was working, set up the configuration, etc). Not sure how I did but, if I remember well, there is an option on the network to remove whatsapp.
3- Reconfigured the Cinny on UT (i.e. to follow the steps to allow the encription topic)
4- To build the bridge with Whatsapp again on Beeper on the non UT phone
5- Open Cinny on UT phone.
That decrypted the messages on Cinny.
Later on, although I guess not mandatory nor needed, I removed Beeper installation from the non UT phone.
I hope it helps. -
@Moem (or perhaps @danfro) I tried this today, but I do not get a QR code as a response to the login message. Am I missing something?
I created an account at matrix.org, via the website of Cinny.
I installed Cinny on my FP4 (UT 20.04 OTA-7) from Open Store, the version is recent, so I did not download the click package as some people did further on in this thread.
I created a room and invited the bot.
I opened Signal on my old phone, clicked settings, linked devices and add new device. Then the Signal app appears to be ready to read a QR-code.
On my FP4 I message 'login' to the bot, but then nothing happens. -
@janmv are you trying the tchncs.de signal bridge? There where discussions in their matrix room during the last few days, that the maintainer of that server thought about blocking users from foreign (= non German) countries due to some very heavy spam happening recently.
I sadly saw some of the pics before they got redacted and got invites into rooms. Trust me those ... (I am struggling to write people, monsters would fit better) whatever need to be stopped. But sadly all of us are affected and suffer.So maybe they did make that happen and restricted access to the bot.
Note: I was assured, when I asked, that existing users are not affected.
-
@Marcos Thanks for your detailed instructions. I take it, step 2 means to kick the bot user our of the space/room? I am not using beeper, so trying to find out the aquivalent for Cinny.
