this post was submitted on 09 Jan 2026
441 points (99.1% liked)

Europe

8383 readers
2007 users here now

News and information from Europe πŸ‡ͺπŸ‡Ί

(Current banner: La Mancha, Spain. Feel free to post submissions for banner images.)

Rules (2024-08-30)

  1. This is an English-language community. Comments should be in English. Posts can link to non-English news sources when providing a full-text translation in the post description. Automated translations are fine, as long as they don't overly distort the content.
  2. No links to misinformation or commercial advertising. When you post outdated/historic articles, add the year of publication to the post title. Infographics must include a source and a year of creation; if possible, also provide a link to the source.
  3. Be kind to each other, and argue in good faith. Don't post direct insults nor disrespectful and condescending comments. Don't troll nor incite hatred. Don't look for novel argumentation strategies at Wikipedia's List of fallacies.
  4. No bigotry, sexism, racism, antisemitism, islamophobia, dehumanization of minorities, or glorification of National Socialism. We follow German law; don't question the statehood of Israel.
  5. Be the signal, not the noise: Strive to post insightful comments. Add "/s" when you're being sarcastic (and don't use it to break rule no. 3).
  6. If you link to paywalled information, please provide also a link to a freely available archived version. Alternatively, try to find a different source.
  7. Light-hearted content, memes, and posts about your European everyday belong in other communities.
  8. Don't evade bans. If we notice ban evasion, that will result in a permanent ban for all the accounts we can associate with you.
  9. No posts linking to speculative reporting about ongoing events with unclear backgrounds. Please wait at least 12 hours. (E.g., do not post breathless reporting on an ongoing terror attack.)
  10. Always provide context with posts: Don't post uncontextualized images or videos, and don't start discussions without giving some context first.

(This list may get expanded as necessary.)

Posts that link to the following sources will be removed

Unless they're the only sources, please also avoid The Sun, Daily Mail, any "thinktank" type organization, and non-Lemmy social media (incl. Substack). Don't link to Twitter directly, instead use xcancel.com. For Reddit, use old:reddit:com

(Lists may get expanded as necessary.)

Ban lengths, etc.

We will use some leeway to decide whether to remove a comment.

If need be, there are also bans: 3 days for lighter offenses, 7 or 14 days for bigger offenses, and permanent bans for people who don't show any willingness to participate productively. If we think the ban reason is obvious, we may not specifically write to you.

If you want to protest a removal or ban, feel free to write privately to the primary mod account @EuroMod@feddit.org

founded 2 years ago
MODERATORS
 

Granted, the part

The globally recommended app by privacy and security experts, Signal, is now being downloaded massively and tops the Danish Google Play Store

is a little ironic, but you gotta push this winning tide and then work from that.

(page 2) 44 comments
sorted by: hot top controversial new old
[–] copacetic@discuss.tchncs.de 11 points 1 day ago (1 children)

Is it about the geopolitics or did SaveSocial's marketing campaign "digital independence day" last weekend (look for #DIday and #DIDit) also contribute? I'm not sure how visible that was internationally or if it was just a German campaign.

[–] freeman@feddit.org 8 points 1 day ago

DID stemms from a Talk AG the CCC this year. It is a month old and was held in german. I think this isnt DIDs work here

[–] rumschlumpel@feddit.org 24 points 1 day ago* (last edited 1 day ago)

If only the threat didn't (also) come from inside the house when it comes to privacy. I don't want my national police to have full access to my chats at all times any more than I want the USians to have that access, possibly even less. FBI or CIA isn't going to personally bust down my front door, arrest me and seize all my computing devices because I called a local politician a dick.

[–] comrade_twisty@feddit.org 23 points 1 day ago (3 children)

Unfortunately Threema the European alternative that’s at least as secure as Signal costs money - and that one time fee is enough to send everyone to Signal.

[–] rumschlumpel@feddit.org 30 points 1 day ago (2 children)

It's also not open source.

load more comments (2 replies)
[–] B0rax@feddit.org 9 points 1 day ago

As much as I praise Threema… it frankly sucks compared to the alternatives. Delayed message delivery, sometimes no notifications, somehow dated looking Ui…

load more comments (1 replies)
[–] TankovayaDiviziya@lemmy.world 5 points 23 hours ago

Welcome to the club!

[–] poVoq@slrpnk.net 14 points 1 day ago (11 children)

Like one of the main things Signal is really terrible at given that it is based in the US and hosted on AWS servers 🀦

I believe the fact that Signal is hosted on Apple or Google clients is worse than its server host. (I still use and recommend it though)

Convincing people to use an open Android build is much harder than installing another messenger.

[–] fxdave@lemmy.ml 1 points 1 day ago (4 children)

It's e2e encrypted. Although, as I noticed, the key is just a short pin, unless you use password, but the recipient might not use it and your messages are just as secure as your recipient.

[–] rumschlumpel@feddit.org 20 points 1 day ago

The PIN isn't actually the encryption key, it's just a display lock for the local client. But if whoever wants to read your messages has physical access to your phone and already bypassed the normal android lockscreen, you're fucked anyway.

[–] Dionysus@leminal.space 9 points 1 day ago (1 children)

The other party is always the weakest link.

But also signal's pins are a little more complicated than that, but you're right, switch to a passphrase.

Plus side, even if signal themselves edited the secure enclave, the world would need a new client pushed and probably notice something was off.

The way signal's encryption works is really an art in paranoia.

[–] plyth@feddit.org -1 points 1 day ago (1 children)

the world would need a new client pushed and probably notice something was off.

Not if the US have the support of Google.

[–] Dionysus@leminal.space 3 points 18 hours ago (1 children)

Totally not how the APK teardown community works, but ok.

[–] plyth@feddit.org 1 points 18 hours ago (1 children)

How does APK teardown help if Google can replace the app unnoticed?

[–] Vincent@feddit.nl 1 points 17 hours ago* (last edited 17 hours ago) (1 children)

Because there will always people running Signal from a different source, and only one of them is sufficient to notice the server has been tampered with.

(And I'm not sure if they have reproducible builds yet, but if they do, people can also verify that even the Google Play-provided APK does or doesn't match the published source code.)

[–] plyth@feddit.org 0 points 17 hours ago

notice the server has been tampered with.

Which server?

doesn’t match the published source code

People don't control their phone. There is no way of knowing if the installed app is the one that is running.

[–] poVoq@slrpnk.net 0 points 1 day ago (2 children)

And? That doesn't help at all if the US government decides to force Signal to stop servicing Denmark.

[–] rumschlumpel@feddit.org 11 points 1 day ago* (last edited 1 day ago) (1 children)

It helps in that they still can't read your messages. The EU is likely to make e2e messaging illegal before the USA cuts access.

[–] poVoq@slrpnk.net 4 points 1 day ago (2 children)

You can't really make e2ee messaging illegal, at least it is impossible to enforce with decentralized open-source messengers.

It is much more likely that the US will mess with Signal, than that you will stop being able to use an e2ee messenger like XMPP, which is just as secure as Signal regarding the e2e encryption.

[–] rumschlumpel@feddit.org 9 points 1 day ago (1 children)

The issue is that it's already pretty hard to convince people to use something easy like Signal, most people just don't care enough for something "complicated" like XMPP-based messengers, especially if mainstream app stores had to stop letting EU-based users install messengers with these features.

[–] poVoq@slrpnk.net -2 points 1 day ago (1 children)

Well, yes. But when it comes to digital independence Signal isn't better than WhatsApp. At least recommend something like Threema if you think the much better alternatives are too hard.

[–] rumschlumpel@feddit.org 13 points 1 day ago

Except Meta fully owns the WhatsApp metadata, and frankly Signal is a lot more trustworthy about its e2e implementation being actually, in practice, secure.

[–] plyth@feddit.org 1 points 1 day ago (1 children)

at least it is impossible to enforce with decentralized open-source messengers.

All you need is a central registry where licensed messengers register their e2ee connections. Then network providers only have to report all ip addresses with connections that are not on that list.

Impossible with VPNs, but politicians have already announced their desire to make them illegal.

[–] poVoq@slrpnk.net 2 points 18 hours ago (1 children)

What? You are not making much sense. What is a "e2ee connection"?

[–] plyth@feddit.org 1 points 18 hours ago (1 children)

An encrypted connection between two endpoints.That's required for "decentralized open-source messengers".

Currently it's impossible to prevent because of all the encrypted video calls of the Meta messengers and similar connections between endpoints.

If those video streams are marked then it is known which endpoints use software that evades surveillance.

[–] poVoq@slrpnk.net 3 points 18 hours ago (1 children)

I am not sure you understand what you are talking about. There is no easy way to distingish between different connections and pretty much all internet traffic is encrypted these days.

[–] plyth@feddit.org 1 points 18 hours ago (17 children)

My argument is that a central registry, where all controlled software registers their connections, is all that is needed to identify the connections that are outside the control of the surveillance state.

load more comments (17 replies)
[–] fxdave@lemmy.ml 1 points 1 day ago

Oh that's another consideration indeed.

load more comments (1 replies)
load more comments (9 replies)
load more comments
view more: β€Ή prev next β€Ί