Signal Just Made One Years Worth of Server Source Code Available in One Dump | Hacker News Reader

Signal Just Made One Years Worth of Server Source Code Available in One Dump

linuxreviews.org

32 pointsChengXiao9 comments

Strangely written article. Everything you need to know is in the first sentence, which just gets repeated half a dozen times using different words.

I appreciated the honesty of their consent popup

> In order to offer an "ad-filled experience" and maximize our profits, LinuxReviews would very much like you to allow our Google AdSense ad-partner to use tracking and cookies so we can show ads from them on our website.

resist ALLOW

Yeah, it's refreshingly honest. Certainly the best I've seen recently - I wonder how it compares to others HN readers have seen?

https://news.ycombinator.com/item?id=26721749

This is a very weird article. It is like the author really wants to believe that this was just an accident.

> forgot to update the GitHub repository

I don't think they "forgot". It was well discussed and people at signal were aware.

> That makes it look as if Signal has been pushing their code updates to git all along

It seems that someone doesn't really understand how software development on teams works if they thought that the whole team just "forgot" to commit their changes and no one noticed. It was expected to everyone I met that they were still using an internal repo.

I'm obviously old and cynical. The idea that the script that sends updates to GitHub should break, and that nobody noticed for a year, sounds entirely plausible. Likely, even.

I was thinking they didn't want to reveal the recent MobileCoin integration. Though looks like the Signal Server involvement with that is minimal: https://github.com/signalapp/Signal-Server/blob/365ad3a4f821...

I haven't checked the repo more thoroughly though. They really should give a public explanation; the idea they didn't this when multiple people have asked is not believable.

Thanks for the link to configuration to the payment system there. I found the commit that added that here dated October, 8 2020: https://github.com/signalapp/Signal-Server/commit/39c09733d3... .

Ah, thanks! I don't know why I didn't think to grep for "payments". That makes it pretty clear that they were hiding the integration.

People noticed. tptacek has mentioned it a few times on this forum.

I like Signal. I want to like Signal. But I find myself making an increasing number of excuses for behavior inconsistent with their roots.

I wonder if there is enough energy out there to propel a thin-client fork.

Reply on news.ycombinator.com