Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is not good. I've moved so many people over in the last week. For purposes of getting them invested, this is a truly inopportune moment for an extended outage.


But it’s par for the course for newly popular services. Some don’t survive the popularity and some thrive in spite of the degraded service. Signal will figure it out. All the best to the engineering team at Signal right now!


>But it’s par for the course for newly popular services.

It is, but most consumers don't care, they just what their stuff to work 100% of the time as frictionless as possible, and, on top of all things, for free. Otherwise they just run back to the usual free surveilanceware.

I've tried and failed to convince some young, highly educated zoomer friends with good incomes to move away from WhatsApp and Facebook and even when I told them "Look, they're basically spying on you" they just brush it off and say "I don't care, it's fun, easy to use and all my friends are already there".

Ironically, it was easier to convince my boomer parents to move to Signal and they also understand and agree with the tradeoffs and extra friction for the sake of free privacy but younger people just want to be where their friends are and not feel left out (remember the blue vs green bubble stigma on iMessage).


Using Telegram is a rational decision if you want a service that's good at fun conversations. Signal's value proposition is _secure conversations_ and it does that much better than other services. "Fun" is not part of Signal's value proposition. More people want/need fun conversations than need secure ones. Regardless of what people "should" want, Telegram serves people's mundane everyday needs materially better than Signal does. "It's fun and the people I care about talking to already use it" is a compelling value proposition, not a frivolous one, given people's everyday needs.

The more someone cares about security and is willing to trade away other good things for security, the better a platform Signal is — but remember, this also flows the other way.


I'm a little confused because you brought up Telegram specifically.

WhatsApp and Facebook Messenger offer the same level of security as Telegram. In fact, I think WhastApp is more secure since it does E2E encryption by default.

It's true that Telegram is about "fun" and not security. I just wasn't sure if you tried to imply Telegram is like Signal with a focus on fun as well, or you just meant most people don't care about security and would rather have fun chats?


Now that you mention it, I _did_ fail to explain why I brought up Telegram. My bad, thank you for calling me on that. I mentioned Telegram particularly because in my social circles, Telegram is number one by a long shot in terms of "people just want to be where their friends are and not feel left out." I should have actually said that, rather than jumping to the next part of the idea.

(I am not here to defend Telegram's portrayal of itself as a secure messaging service — Telegram is grotesquely bad on that axis)


That’s interesting. Do you live in a country where Telegram is particularly popular? Here in the US I don’t think I’ve ever even heard of someone using it. I don’t even know what the app icon looks like. My social circles are on some mix of Messenger, iMessage, Signal, WhatsApp, and if you count coworkers as social contacts, Slack.


not op and aware this may not be representive, but i share the preference for telegram as a just-works, "fun" and high-penetration messenger with whatsapp as a first and sms as second compatability fallback. this beeing in germany.

tg is light on resources like phone storage and bandwidth (and hence money) and has excellent multidevice support.

apart from that i don't belive one can have a seriously private conversation involving a device running popular versions of android/ios.


> WhatsApp and Facebook Messenger offer the same level of security as Telegram.

If you look only at encryption, WhatsApp is even better.

Once you factor in the fact that all your metadata is vacuumed into Facebooks data lake and that it might very well end up in Google Cloud if either you or someone you chat with activate cloud backups.


Telegram has optional E2E encryption (as does WhatsApp) which puts it ahead of Facebook Messenger. Unlike FB Messenger and WhatsApp, the company behind Telegram so far doesn't have a history of selling your personal data. I'd say it's fairly competitive, though obviously not ahead of Signal


> Telegram has optional E2E encryption (as does WhatsApp)

WhatsApp, for all its faults is E2E-encrypted by default and all the time.

Not that it helps much unless you avoid activating backups and convince all your contacts to avoid backups.

I don't like WhatsApp (anymore), but we should stick to the facts.


Thanks for setting the record straight. I actually thought you needed to opt in (was that maybe how it worked when they first added it?) but I'm glad to hear it's always on


Facebook Messenger also has optional E2E encryption in a feature called Secret Conversations which is very similar to Telegram's Secret Chats. A big difference though is that Facebook uses the Signal protocol while Telegram rolled their own.


I don’t believe fun conversations are mutually exclusive with secure communications. You can have fun conversations with them being secure from prying eyes.


Strongly agree with this. However, I also believe that there is no existing service that does both well.


Why are there so many Telegram fanboys astroturfing in this thread? This thread has nothing to do with Telegram.


Loved ones. Especially seniors. Are the easiest to convince

You carrot them with a unique way to ping you, over tech no one else has, and they see it like an intimate connection with you

I had my elder parents and SO use it for years before friends i consider privacy aware and tech savvy... For years

Added benefit: its a lot harder to share memes over a young network with no traffic.

I guess that may change now....


Never looked at it this way but 100% true in my case. Got my parents on Signal three years ago and they have been perfectly happy.


Actually all the non switchers now see that there are really a lot of switchers. It's even on mainstream news websites here. I see this as a win.


Did you try to tell them "Ten years from now, your future you might care", as this is really what privacy is about.


One of those annoying Telegram users here.

I too wish Signal engineers good luck!

(Even if I personally mostly use Telegram and hope for Matrix to "win", Signal is a fantastic piece of software as far as I can see, both as an extremely secure (I think) messaging client in its own right and also as an inspiration for other messaging platforms.)


Telegram is not a secure chat application though. It's more similar to Facebook Messenger. You're better off using WhatsApp over it if you care about security.

Or obviously Signal.

When it comes to Matrix, it's a little trickier. Riot, the most common Matrix client does E2E encryption on DMs and invite only rooms. What I'm not sure is what happens if you send a private message to someone who is using Matrix client that doesn't do E2E. Will it fail to send? Or will it like fallback to not encrypted?


> Telegram is not a secure chat application though.

Fun fact: I didn't even write that.

The rest is not so much for you personally as for a number Signal fans:

I get it, I get it: Signal is best. But seriously: do you Signal fans have to derail every conversation?

Do you have to take a jab at every other messenger at every given opportunity?

Or can we agree that there's room for more than one solution? Because physical mail, email, irc, Telegram etc are probably going to stay around for a long time, at least until Signal solves:

- large groups

- backups

- grows a stable messaging API

- creates a Bot api

- and starts teleporting physical goods

- etc

Until Signal solves all this we are going to have to deal with other mesaging solutions.

Deal with it. Seriously.

Yes: Signal is probably the most secure now IMO.

No: talking down other messengers doesn't make it better.

@dang: apologies in advance. I've tried hard to keep it polite.


> But seriously: do you Signal fans have to derail every conversation?

I don't really have a horse in this race, just a guy who was scrolling through these comments and was struck how rude and ridiculous this remark is.

You're in a discussion thread for an article about Signal. You're the one who brought up Telegram and now you're having a little fit and accusing Signal fans of "derail[ing] every conversation"? This conversation is about Signal. If you didn't want people comparing it to Telegram, why did you bring it up?


> You're in a discussion thread for an article about Signal. You're the one who brought up Telegram

This would be a good point, if it wasn't for the point that the only reason I brought up Telegram was to say I was a Telegram user cheering for the Signal team!


Fair.


> do you Signal fans have to derail every conversation?

I know this happens a lot in other threads about other messengers, so it's probably a fair comment. But I find there is something ironic about someone commenting on a story about Signal that they use Telegram and then complaining that other users talking about Signal are derailing the conversation.


There is an already ecosystem on Telegram bots, channels and groups that lacks Signal, even if all my contacts move to Signal i would still keep Telegram only for those features and many more.


Exactly my point.

We are going to have to live with various systems for a long time, IMO hopefully "forever" since competition typically often does wonderful things.


It will be sent encrypted, and the receiver will only be able to view it if they are on an encryption-capable Matrix client.


What happens is that the client which doesn't do E2E can't decrypt the message and shows an error. I use fractal and this is what happens there.


Yes. Telegram is not secure. You are better of using messenger or airsend (https://www.airsend.io/). Here is a detailed post on Telegram security (https://heimdalsecurity.com/blog/is-telegram-secure/). E2E encryption is not default it applies to only secure chats.


End to end encryption isn't even in the top 5 when I'm selecting a chat client for general personal use.


Thousands of people are joining Signal after hearing about the Whatsapp privacy policy changes, but the irony is that a significant portion of these people (if not the majority) still use Facebook, upload photos and stuff, chat on messenger, with that app, installed on their phones alongside Signal. Most people don't actually realize why should they be worried about corporations collecting their data. I wonder what fraction of these people will stick to Signal. Signal is adding new servers, lets hope they dont need to retire these in the coming days.


Yup, and it's not like Signal should be surprised with it. The influx has been happening for a while now and it seems like they were incapable of handling it. I have no idea how I'm going to defend them against all my family members I somehow managed to convert from WhatsApp to stay on this platform.


I'm not sure a 5x+ growth in under a week is really "for a while now". If anything I'm surprised they've kept it together this long. The growth looks more like an exponential function too, so that's even more difficult.

Good luck Signal team!


As much as I'm cheering for Signal, yes this was absolutely foreseeable.


From their tweet:

> We have been adding new servers and extra capacity at a record pace every single day this week nonstop, but today exceeded even our most optimistic projections. Millions upon millions of new users are sending a message that privacy matters. We appreciate your patience.

https://twitter.com/signalapp/status/1350165610936766464

They've seen it coming, just never expected this much new traffic.


It’s an FOSS teaM working around the clock to support... let’s not be mean I’m sure they are doing all they can to get this resolved


It's only FOSS by appearance really - it's still a team of well-paid engineers that operate like any other startup, with the difference that you can read the code of their apps and the bug-tracker is public.

They operate on their own schedules and priorities, and it's tricky to get your PR into any of the clients.


Well paid, but not lavishly paid by Silicon Valley standards. Salaries listed in their IRS form 990 have the CEO making ~$200k and other engineers in the ~$120k-$180k range.

https://projects.propublica.org/nonprofits/organizations/824...


Whatever reasonable excuses the signal team has are completely irrelevant from the perspective of casual users.


I haven't moved any friends in the last week, but I've gotten lots of notifications in Signal of many friends joining this week. Hopefully it just requires some simple modifications of some parts of their infra that they didn't realize were scaling bottlenecks.

Based on my friends, mostly foreigners and English-speaking locals here in Hong Kong, Signal has grown about 20% in the past week.


Signal grew 5x in one day[1]. A week before Musk amplified the WhatsApp story with his "Use Signal"[2] tweet. It then did the rounds on MSM. WhatsApp shoots itself in the foot (though IMO it's a blip in their stats). Parler (thankfully) has been kicked off AWS. All good news for alternative messaging technology.

https://twitter.com/signalapp/status/1349577579091566592

https://twitter.com/elonmusk/status/1347165127036977153

edit: as daniel_sk points out this is not a x5 increase but crossing the threshold from 10+ to the next 50+ mm downloads.


Google Play has 10m+ and then 50m+ step. So if you have 40m users then you still are in the 10m+ bracket.


thanks I didn't know this, so it's most probably not a x5 increase but just a cross of this threshold.


I'm a new Signal user myself (maybe six weeks or so). In the past week there's been a huge influx of my contacts joining Signal.

I will continue to use iMessages for my iOS contacts. For SMS people I will gently nudge (hey, have you tried Signal? and then let the convo go where it does) and then use Signal as the primary for those people.


Is SMS still popular in your part of the world? I literally haven't gotten an SMS from a human in the past 9 years. Here in Hong Kong, SMS is how your bank sends notifications, and for spam. The chat space is vastly dominated by Weixin/WeChat and WhatsApp.


United States. I'm 37.

99.9% of messaging (for me) occurs via iMessages or SMS. FB Messenger is occasionally used for people who are more acquaintances (don't have their phone number).

I don't really have a good reason to not use iMessages (blue bubbles). Reasonably secure and Just Works. SMS on the other hand.... my least favorite part of SMS (besides the complete lack of security) is that media messages are crippled in quality. Photos and videos are compressed and distorted beyond belief.


United States too. Same feeling that most messages are iMessage or SMS. But as one of two extended family members with Android against ~10 with iPhones, for me iMessages are pretty horrible. They mostly work most of the time, but frequently there are glitches on glitches. SMS between Android phones are rock solid. Just a single data point.


> SMS between Android phones are rock solid

not just android, they work with every mobile handset even with the poorest reception or (even lack of) data-plan.

i use ~200 sms per year, pretty constant since i got my first mobilephone.

kinda sad we didnt come up with something better thou.


In the U.S. I’ve never had anyone suggest messaging other than SMS, FB, or (long ago) Twitter.


It's an interesting anecdotal-metric. I've seen Telegram to Signal signups at about 5:1 for my contacts.


I"m not saying this is what happened this time, but I would suspect we'll see a lot more outages of encrypted centralized chat like this as nation states try to prevent general society from moving away from the social media websites almost solely designed for mass surveillance.


https://www.nytimes.com/2021/01/13/technology/telegram-signa...

> The result was a mass migration that, if it lasts, could weaken the power of Facebook and other big tech companies. On Tuesday, Telegram said it added more than 25 million users over the previous three days, pushing it to over 500 million users. Signal added nearly 1.3 million users on Monday alone, after averaging just 50,000 downloads a day last year, according to estimates from Apptopia, an app-data firm.

> “We’ve had surges of downloads before,” said Pavel Durov, Telegram’s chief executive, in a message on the app on Tuesday. “But this time is different.”

As someone who semi-fondly remembers the Twitter failwhale, I really don't think a more conspiratorial theory than "a few million people suddenly tried to jump on" is required here.


Agreed, there is a simple & likely explanation for this outage, being a huge increase in user base worldwide.


Hey, who let the Signal devs write their backend in Ruby on Rails? :-p


Where can I read about the signal server-side architecture? Is it open-source as well?


The server is open source https://github.com/signalapp/Signal-Server

Java/DropWizard app


This cannot be what they are running in production though right?

And this is also not open source for my understanding: * Last commit was on 2020-04-22 * only a single committer (moxie-signal) * only „bump version to xyz“ commits * not a single PR is getting merged but all are just closed (one references „pr was created on wrong repository“) * not a single code comment in what I saw so far * there are also references to AWS and GCP but I could not find any reference to Microsoft/Azure (where their current IP is pointed to)

Is there some other place where the „real“ open source process is happening? Maybe some sources how their production architecture looks like?

Edit: here is a lot explanation for this https://www.reddit.com/r/signal/comments/kxusy8/signal_needs...


the issue could be network or database related


I read the message differently. It looks like there have been so many people wanting to switch, that Signal was overwhelmed by the new demand.

I don't know if it is true, but for your peers it certainly is a different story to tell them about all the people who are switching than just about a service who had an outage. Hopefully, the next days will bring some light to the cause of the outage.


Same here. I moved a lot of my contacts and several groups over to Signal. And this happened. I'm fine with the down time, I don't have any urgent communication needs and if I did, there are other ways to contact people (SMS, email, WhatsApp, etc.). But I feel like I owe these people an explanation about this. An explanation where I say, "Hey look, there are no guarantees this won't happen in the future, but should still stick to this one". I'm not very good at writing and hoping to find something that I can use :)


Same here!

Last night a friend from India popped up on signal. I told him "Welcome!" and he said "You finally wore me down, I've left WhatsApp and I'm trying to move my family off of it..."


Same here I had a group of about 15 ex colleagues I keep in touch with and managed quite easily to convince all of them to get Signal about 2 weeks ago. They’re all back chatting on Facebook and some are claiming that WhatsApp won’t be sharing data because of some European court case. AKA rationalising their negligent behaviour with regards to their private data.

These are all people who have completely abandoned Facebook for WhatsApp and Instagram.


I agree. This happened with Pokemon GO, at launch, but the reasoning is the same: "we didn't think there'd be that many users." Took almost a month to become stable. Hopefully Open Whisper Systems will get on it faster (I have confidence, for whatever that's worth).


They managed to jump from 10M installs to 50M in a matter of days, and that's just on Android.


It's great! Everyone I 'converted' is now thinking about the implications - from many different angles. Any outage for a few weeks is a win for humans and a huuuuge kick in the nuts for the twats.


Yeah I've been grinding my teeth thinking about exactly this all day. :(


> This is not good. I've moved so many people over in the last week.

Please stop moving people to centralized services.


If only decentralized services worked as well as centralized ones..


Yeah it kinda pisses me off constantly reading about how decentralised messaging, or ad-hoc wireless mesh networks, or whatever it is, is the way to go.

That shit works on a small scale. Serving the entire planet needs hierarchy and co-ordination.

Doesn’t necessarily mean everything has to be completely centralised, but some of the woolly wishful thinking you come across is not based in the real world.


πr²


You're not stuck in the traffic jam, you are the traffic jam


I think Elon moved more users than the user you quoted.

EDIT: We know it was a joke. Maybe you are downvoted because of your username.


You should considered Telegram instead.


Telegram is insecure and also being swamped with right wingers. Doesn’t seem promising.


i have so much fun in public websites seeing americans fight over right and left. its good entertainment. keep it up.

anyways. It will be really difficult to convince my friends to remain on signal. At least they are technically sound. Thinking an excuse to come up with though. i donated money today too.


Indeed. Especially considering that US left would be sort of mid-right, or at best centre-right in most parts of the world.


I should leave because some people I’ll never talk to on it have right wing views?


> also being swamped with right wingers

So is Signal. 'right wingers' are everywhere.


Yeah; almost half the users are right of center.


Right. But one of these is secure and the other isn’t. State action against telegram is eminent.


These users who are coming from these platforms (WhatsApp, Telegram) don't care about that. If Signal is still unable to stay online then the users will leave and they will try the second best option. (Even if it is less secure).

This has now become a usability and reliability issue for Signal.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: