<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="https://shkspr.mobi/blog/wp-content/themes/edent-wordpress-theme/rss-style.xsl" type="text/xsl"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	    xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	     xmlns:dc="http://purl.org/dc/elements/1.1/"
	   xmlns:atom="http://www.w3.org/2005/Atom"
	     xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	  xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>
<channel>
	<title>signal &#8211; Terence Eden’s Blog</title>
	<atom:link href="https://shkspr.mobi/blog/tag/signal/feed/" rel="self" type="application/rss+xml" />
	<link>https://shkspr.mobi/blog</link>
	<description>Regular nonsense about tech and its effects 🙃</description>
	<lastBuildDate>Wed, 14 Aug 2024 20:23:44 +0000</lastBuildDate>
	<language>en-GB</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://shkspr.mobi/blog/wp-content/uploads/2023/07/cropped-avatar-32x32.jpeg</url>
	<title>signal &#8211; Terence Eden’s Blog</title>
	<link>https://shkspr.mobi/blog</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title><![CDATA[Signal's new(ish) URI Scheme]]></title>
		<link>https://shkspr.mobi/blog/2023/02/signals-newish-uri-scheme/</link>
					<comments>https://shkspr.mobi/blog/2023/02/signals-newish-uri-scheme/#comments</comments>
				<dc:creator><![CDATA[@edent]]></dc:creator>
		<pubDate>Thu, 23 Feb 2023 12:34:31 +0000</pubDate>
				<category><![CDATA[/etc/]]></category>
		<category><![CDATA[signal]]></category>
		<category><![CDATA[url]]></category>
		<guid isPermaLink="false">https://shkspr.mobi/blog/?p=44898</guid>

					<description><![CDATA[A few years ago, I idly wondered &#34;Whatever happened to URI Schemes?&#34;. Older communications protocols didn&#039;t rely on http. You can use mailto:me@example.com to send email, sms:+447700900123 to send a text message, and skype:terence.eden to use Skype. There are dozens of these sorts of protocols.  But modern apps seem to prefer making everything an https: link. That way, if the user doesn&#039;t have…]]></description>
										<content:encoded><![CDATA[<p>A few years ago, I idly wondered "<a href="https://shkspr.mobi/blog/2017/04/whatever-happened-to-uri-schemes/">Whatever happened to URI Schemes?</a>". Older communications protocols didn't rely on <code>http</code>. You can use <code>mailto:me@example.com</code> to send email, <code>sms:+447700900123</code> to send a text message, and <code>skype:terence.eden</code> to use Skype. There are dozens of these sorts of protocols.</p>

<p>But modern apps seem to prefer making everything an <code>https:</code> link. That way, if the user doesn't have the app installed on their phone, they get taken to a friendly landing page - rather than seeing an error message.</p>

<p>The Signal messaging app launched <code>signal.me</code> URls for this purpose <a href="https://github.com/signalapp/Signal-Android/commit/3cc2cd0b17847f548f20a97c9c9f91cb07b08d04">back in 2021</a>.  It allows you to share a link like <a href="https://signal.me/#p/+447700900123"></a><a href="https://signal.me/#p/+447700900123">https://signal.me/#p/+447700900123</a> and have your signal client open up a chat with that person.</p>

<p>Then, <a href="https://github.com/signalapp/Signal-Android/commit/0685cf4e515bc0d0c625f32e9194ab17913b2a00#diff-b3615bcd91f24e241647fb2e9d3763485b699fa92f12b2d907620f7641d8b649R18">towards the end of 2022</a> they added support for their <em>own</em> scheme! <code>sgnl</code> (although it doesn't appear to have been submitted as an IETF draft, and isn't listed on IANA).</p>

<p>It has exactly the same layout as it's <code>https</code> sibling: <a href="sgnl://signal.me/#p/+447700900123">sgnl://signal.me/#p/+447700900123</a></p>

<p>Of course, not everyone has (or wants) a phone number. So <a href="https://signal.miraheze.org/wiki/Usernames">Signal are adding support for usernames</a>.</p>

<p>Sadly, they've taken the <a href="https://shkspr.mobi/blog/2013/06/is-github-racist/">same xenophobic attitude as GitHub</a> and insist that only good ol' American letters and numbers can be used. No fancy accents, right-to-left languages, or Korean Hangul.</p>

<p>Nevertheless, it will be interesting to see if this prompts a surge in Signal take-up. Especially important as <a href="https://signal.org/blog/sms-removal-android/">Signal are dropping SMS support</a></p>
<img src="https://shkspr.mobi/blog/wp-content/themes/edent-wordpress-theme/info/okgo.php?ID=44898&HTTP_REFERER=RSS" alt="" width="1" height="1" loading="eager">]]></content:encoded>
					
					<wfw:commentRss>https://shkspr.mobi/blog/2023/02/signals-newish-uri-scheme/feed/</wfw:commentRss>
			<slash:comments>5</slash:comments>
		
		
			</item>
		<item>
		<title><![CDATA[Questions to ask before launching a crypto-payments feature]]></title>
		<link>https://shkspr.mobi/blog/2021/04/questions-to-ask-yourself-before-launching-a-crypto-payments-feature/</link>
					<comments>https://shkspr.mobi/blog/2021/04/questions-to-ask-yourself-before-launching-a-crypto-payments-feature/#comments</comments>
				<dc:creator><![CDATA[@edent]]></dc:creator>
		<pubDate>Thu, 08 Apr 2021 11:23:39 +0000</pubDate>
				<category><![CDATA[/etc/]]></category>
		<category><![CDATA[crypto]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[fraud]]></category>
		<category><![CDATA[money]]></category>
		<category><![CDATA[scam]]></category>
		<category><![CDATA[signal]]></category>
		<guid isPermaLink="false">https://shkspr.mobi/blog/?p=38641</guid>

					<description><![CDATA[Messaging app Signal is launching a payment service in the UK. This will allow users to send each other money cryptocurrency. Many people have written about why this is a daft idea.  But they&#039;ve mostly talked about why cryptocoins corrupt everything they touch.  I want to talk about why this is a shitty idea from a product perspective.  It all comes down to user needs. What pain point are you…]]></description>
										<content:encoded><![CDATA[<p>Messaging app Signal is launching a payment service in the UK. This will allow users to send each other <del>money</del> cryptocurrency. <a href="https://news.ycombinator.com/item?id=26713827">Many people</a> have <a href="https://www.schneier.com/blog/archives/2021/04/wtf-signal-adds-cryptocurrency-support.html">written about</a> why this is <a href="https://twitter.com/jonty/status/1379870667018006530">a</a> <a href="https://www.stephendiehl.com/blog/signal.html">daft</a> <a href="https://twitter.com/RealSexyCyborg/status/1380029032423583744">idea</a>.  But they've mostly talked about why cryptocoins corrupt everything they touch.  I want to talk about why this is a shitty idea from a <em>product</em> perspective.</p>

<p>It all comes down to <strong>user needs</strong>. What pain point are you removing?  Uber made taxis mildly less irritating, for example. But the UK already has a fairly mature mobile money market, so what does Signal add?  <a href="https://news.ycombinator.com/item?id=26714541">Here are a few obvious questions I asked them</a>:</p>

<ul>
<li>The UK already has <a href="https://www.fasterpayments.org.uk/">faster payments</a> in all major banks. I can send and receive money <em>instantly</em> from app or Web. Will Signal be as fast as that?</li>
<li>The UK has a problem with <a href="https://www.which.co.uk/consumer-rights/advice/what-to-do-if-you-re-the-victim-of-a-bank-transfer-app-scam-aED6A0l529rc">authorised push payment fraud</a>. Banks can recover funds which have been sent as a result of phishing / fraud. How can someone reverse a payment on Signal if it was fraudulent?</li>
<li>The UK also has <a href="https://www.moneysavingexpert.com/news/2020/06/confirmation-of-payee/">receiver verification</a>. If I try to send to an account and it doesn't match the name I'm sending to, my bank will warn me. How does Signal stop impersonation?</li>
<li>There's no cost to sending payments on most mainstream banks. How much does Signal charge?</li>
<li>Most banks let the user <a href="https://www.reddit.com/r/UKPersonalFinance/comments/le2rgo/i_know_this_is_not_completely_related_to_personal/">block receiving payments from specific accounts</a>. Can Signal stop harassers sending unwanted money?</li>
</ul>

<p>Those were the questions I immediately thought of with my "product" hat on. I'm sure you can think of more.</p>

<p>The responses were... not well thought through. I'll respond to each one.</p>

<blockquote><p>A: MobileCoin is as fast (or faster in some cases) than a bank payment in the UK with greater privacy. As far as settling back to Fiat, if that's what you're asking about, the velocity of that depends on on-ramp and off-ramp integrations which will come over time (but it looks like there's no reason MobileCoin can't help developers deliver payments at the same speed as banks).</p></blockquote>

<p>I've yet to see a settled crypto transaction which is as fast as a UK bank transfer. We'll come back to "privacy" later. In terms of getting real money out of the system, the answer seems to be "variable" - which doesn't sound like a great customer experience.</p>

<blockquote><p>Payments on MobileCoin cannot be reversed at the protocol level. If you want escrow and reversibility, you should use a wallet or payment service that supports those primitives. We believe that developers will build such services on top of the foundation of the MobileCoin protocol.</p></blockquote>

<p>So, no. If you get scammed, tough. Neither a bank, nor a regulator, nor a court can reverse a dodgy transaction. Where's the user need for that?</p>

<blockquote><p>Signal relies on phone numbers for identities. Other apps that integrate MobileCoin may have a higher threshold for identification.</p></blockquote>

<p>So, again, if someone pretends to be your mate and cons you out of money, there's no independent verification. I bet users just love sending money and not knowing who it is going to.</p>

<blockquote><p>Fees are set by the foundation (which has a stated goal of keeping transaction fees to around $.04 when the network isn't congested). Currently fees are higher as they need to be adjusted by a foundation vote.</p></blockquote>

<p>That's pretty high! People in the UK literally use their banking apps to message each other - <a href="https://shkspr.mobi/blog/2020/05/to-get-my-attention-pay-me/">sending penny payments to get someone's attention</a>.  What is the user getting for this proposed transaction fee?</p>

<blockquote><p>Signal doesn't allow people you haven't keypaired with to send you funds. If you have accepted a message request from someone, they can send you money.</p></blockquote>

<p>If you can't block people - even after accepting them - that's a vector for harassment, or worse.  Your psycho-ex can bombard you with micropayments. Your dodgy mate can offload his illegitimate gains into your account. It sounds like a nightmare.</p>

<p>So, I ask again, what is the use-case for this feature?  It isn't faster, it costs more, it is in a volatile cryptocurrency, it has no fraud protection, and it facilitates abuse.</p>

<p>The one thing it has going for it is that it is "anonymous".</p>

<p>Except, of course, it isn't anonymous in any real sense. You need the user's phone number - which means law enforcement can track their activity. 
While the ledger may be anonymous, if you send a unique amount of money, and it gets received instantly, it's going to be pretty easy to work out who is at either end of the transaction.</p>

<p>Perhaps there is a huge untapped desire to send expensive pseudonymous payments. Perhaps people want to pay for stuff using a speculative instrument. Perhaps everything I thought I knew about people is wrong.</p>

<p>Or, perhaps this is another pump-and-dump cryptoscam?</p>

<p><a href="https://coinmarketcap.com/currencies/mobilecoin/"><img src="https://shkspr.mobi/blog/wp-content/uploads/2021/04/Screenshot_2021-04-08-MobileCoin-price-today-MOB-live-marketcap-chart-and-info-CoinMarketCap1.png" alt="Price of the MobileCoin rapidly rising." width="1160" height="855" class="aligncenter size-full wp-image-38647"></a></p>

<p>I wonder who was "investing" in those coins <em>before</em> the big announcement?  Nothing to see here...</p>
<img src="https://shkspr.mobi/blog/wp-content/themes/edent-wordpress-theme/info/okgo.php?ID=38641&HTTP_REFERER=RSS" alt="" width="1" height="1" loading="eager">]]></content:encoded>
					
					<wfw:commentRss>https://shkspr.mobi/blog/2021/04/questions-to-ask-yourself-before-launching-a-crypto-payments-feature/feed/</wfw:commentRss>
			<slash:comments>5</slash:comments>
		
		
			</item>
	</channel>
</rss>
