Thanks, didn't realize it at first but indeed there it is. Awesome work of the Molly team!
Signal vs Molly vs Molly-FOSS
Nuttso how much funding do you need? Do you have contact info I can contact you at, I'm very interested in this feature
- Edited
cnm1929933 check my profile. We would all love to see that feature
https://signal.me/#eu/adjsuVy8odElg3ixabb9lRYVwnuv--Sv62TZ6-JmmHxZjAio6ldALqeesYIvPCld
Will Molly Text be 'text only' or Molly without Monero?
Bringing Monero is really ambitious. I don' t know if this is a good idea. Take a look here: https://samouraiwallet.com/features
^^ this used to be a privacy friendly bitcoin wallet for Android. I don' t have any details about what happend. But adding Monereo could bring trouble.
Keep up the good work.
- Edited
Interestingly enough, switching to Molly solved a major issue I've been having with Signal and Graphene OS where I periodically don't receive phone calls. With Signal I get a notification a few minutes after a call that I've missed an incoming call. But my phone never rings. I've tried Signal using google's notifications and web socket and I still have the same issue. It has permission to run in the background. I get missed incoming call notifications even if I have the app actively open. And I've been pulling my hair out trying to solve this within Signal. Other users have been experiencing this on Android recently so I don't think it's a configuration problem or even necessarily a problem with Graphene OS: https://github.com/signalapp/Signal-Android/issues/13613
Since I've switched to Molly, it's been three full days and I haven't missed a single incoming call, which would have been unheard of with signal this past month.
- Edited
Trog Many thanks for this report. I'll finally be trying out Molly now.
Yes, I also have this exact same problem with Signal (battery savings also disabled) , on a high end Samsung Galaxy S for at least the past year. So
it really is a problem with Signal and it doesn't have anything to do with GOS.
I however do remember it working perfectly a few years ago.
- Edited
DeletedUser201 You're very welcome. I used the Molly-FOSS version from the Accrescent store. I'm not sure if that makes a difference, but it's been working like a charm.
Since this thread is open, can I just install Molly and move all my chats and groups from Signal to Molly without any struggle? Or there is no way to do this transparently?
- Edited
gonzalo When I tried it, I received a notification saying that it was unable to import conversation history from the latest version of Signal into Molly from a local database backup. As I have multiple other devices with that history saved it wasn't super important to me that these messages be transferred to my phone. When I synced desktop Signal to my new Molly install, my desktop Signal conversation history persisted.
Molly placed me back into all of my group chats, just without the entirety of my conversation history.
gonzalo You'll need to wait for Molly to catch up to Signal and then yes, you can import your Signal backup into Molly.
There is a Molly apk in Accrescent app store. Is this the unified push version?
- Edited
DeletedUser59
To my knowledge the Unified Push version has 'up' in the APK name (e.g. Molly-v7.13.4-1.up1-FOSS.apk). The version on Accrescent is just -FOSS, without the 'up'.
My questions are:
1) I'd like to know if anyone has actually compared/diffed the source codes to see the changes? I'm not saying Molly is backdoored blah blah blah. I just want to know that if anyone has done that and what was the result, before I do it myself.
2) Also I want to know when let's say a vulnerability Z in WebRTC of Signal gets patched, it would end up in Molly. I'm trying to assess the situation for 1-day or n-day exploits.
Maybe you (@Nuttso) can answer my questions.
JackMurphy 1) I'd like to know if anyone has actually compared/diffed the source codes to see the changes? I'm not saying Molly is backdoored blah blah blah. I just want to know that if anyone has done that and what was the result, before I do it myself.
Afaik no one has done that. But we welcome everyone who is willing to do that. We don't see a point in doing an third party audit now. We have lower hanging fruit.
JackMurphy 2) Also I want to know when let's say a vulnerability Z in WebRTC of Signal gets patched, it would end up in Molly. I'm trying to assess the situation for 1-day or n-day exploits.
Security patches will be released immediately. We are working on disabling webrtc. Text only mode.
- Edited
To sum it up:
Signal - contains proprietairy libraries, namelely Google Maps integration, the rest of the code is FOSS.
Molly - Hardened Signal, compatible with contacts that use the Signal app.
Molly still contains proprietairy Google map integration, the rest of the code is FOSS.
Has extra features like TOR, Ram shredding, database encryption, etc.
Might have slightly delayed updates, not by much though.
Molly FOSS - Hardened Signal, compatible with contacts that use the Signal app.
Molly FOSS does NOT contain those Google map integration, the entire code is FOSS.
Has extra features like TOR, Ram shredding, database encryption, etc.
Might have slightly delayed updates, not by much though.
There is also a Molly FOSS version that uses unified push for push notifications.
Google and Apple push services can be read by the FBI, so Molly FOSS and Molly push are safe from that privacy invasion, you can also use GrapheneOS without Google services, this way all versions are safe.
https://www.reuters.com/technology/cybersecurity/governments-spying-apple-google-users-through-push-notifications-us-senator-2023-12-06/
IMO its best to use Molly FOSS is you don't care about Google maps integration.
Use Signal if you want bleeding edge updates, but no additional security features.
Please, correct me if I'm wrong.
Nuttso or someone else:
Has Molly ever had any problems with Signal servers or lawyers?
Maybe not yet, because you're too small, but could Signal servers start deliberately "making life difficult" for Molly users one day?
For example, (allegedly) the GPlay Store regularly interferes with the existence of the Aurora Store and its users...