That’s probably what everyone using Lemmy would prefer to do, but some people believe it would negatively impact their ability to stay in touch with friends or family.

Lemmy will never do such a thing, but specific Lemmy servers might.

Mobile check deposit is the only thing I want from my bank’s app.

I’m running LineageOS with Magisk and Play Integrity Fix. That works for my bank’s app, but I’m annoyed that they make me do it and gave their app a 1-star review on Google Play for it.

Telegram isn’t open source, so I don’t think you’re going to find forks of it.

I stand corrected. Telegram’s client is open source (GPL) and what OP is asking for is reasonable.

Has anyone you talk to regularly asked you to install a specific messaging app? If so, do you actually see a downside to installing it?

If you want actual help with these issues, try the GrapheneOS forum.

I’ve found gos extremely frustrating

Some parts of this are probably unavoidable. High-security systems tend to be inconvenient, and using a non-mainstream operating system often means limited third-party support.

I’m facing the nearly insurmountable task of convincing my friends, family, and colleagues to download and use signal when they are all using encrypted iMessage.

For reasons I can’t figure out, it seems Americans hate the idea of installing any third-party messaging apps. Most Europeans I know have at least two.

Most of my banking apps just simply do not work.

There’s some information on the GrahpeneOS forum, but if the bank insists on using Google’s device attestation, you may not be able to do much other than raise hell with customer service (please do this).

This is one of the reasons I run LineageOS rooted with Magisk; there’s a bypass for Google attestation. That, of course does not have the same security-first goals as GrapheneOS.

Holding down on the space bar to move the text cursor between characters.

This feature exists on some Android keyboards including AOSP keyboard and Heliboard, which are open source.

Phones also have web browsers, and Instagram is usable that way (several years ago, it was not). It is possible that privacy protections will look like automated behaviors to their systems.

Using an app on a device that’s used for little else and has minimal data stored and apps installed on it also limits the potential for data leaks, though probably not as effectively as the browser, particularly when your browser is Mull.

I don’t think Instagram can read your Matrix conversations, but may be able to predict your interests with fancy algorithms or buying information from data brokers, even if it’s related to things you did on another device.

If you want to be more sure it’s not spying on your phone, uninstall the app and use it through your web browser.

If an update to the proprietary Nvidia driver causes Linux to crash, that’s an Nvidia problem, not a Linux problem.

I’m a little surprised by Twitter restricting an account for that. Of course I never believed Musk’s free speech rhetoric, but this isn’t a specific issue where I’d expect them to put their thumb on the scale so blatantly.

That may technically be true, but it’s currently very normalized. Do we actually want to denormalize it? Should the government know about every trivial transaction?

The alternative is safeStorage, which uses the operating system’s credential management facility if available. On Mac OS and sometimes Linux, this means another process running in the user’s account is prevented from accessing it. Windows doesn’t have a protection against that, but all three systems do protect the credentials if someone copies data offline.

Signal should change this, but it isn’t a major security flaw. If an attacker can copy your home directory or run arbitrary code on your device, you’re already in big trouble.

You’d need write access to the user’s home directory, but doing something with desktop notifications on modern Linux is as simple as

dbus-monitor "interface='org.freedesktop.Notifications'" | grep --line-buffered "member=Notify\|string" | [insert command here]

Replacing the Signal app for that user also doesn’t require elevated privileges unless the home directory is mounted noexec.

I don’t recall Signal ever claiming their desktop app provided encryption at rest.

I’m not sure if they’ve claimed that, but it does that using SQLCipher.

If someone can read my Signal keys on my desktop, they can also:

• Replace my Signal app with a maliciously modified version
• Install a program that sends the contents of my desktop notifications (likely including Signal messages) somewhere
• Install a keylogger
• Run a program that captures screenshots when certain conditions are met
• [a long list of other malware things]

Signal should change this because it would add a little friction to a certain type of attack, but a messaging app designed for ease of use and mainstream acceptance cannot provide a lot of protection against an attacker who has already gained the ability to run arbitrary code on your user account.

It seems like at least some people view apps that come preinstalled on their phone differently from other apps, but I’m not sure why.

most people see messaging apps like Signal, WhatsApp and other third party apps for personal use only.

In Europe, businesses, especially small businesses often use WhatsApp, to the point of putting its logo next to their phone number on signs. I wonder what creates the perception where you are that messaging apps are for personal use, not business.

Signal, being owned by a nonprofit has a bit more resistance to that than most.

That’s the main reason I recommend it over alternatives with similar technical capabilities, such as WhatsApp.

I’m not surprised they could. I’ve worked on things that send SMS messages and I’m aware that carriers filter for spam and scams (perhaps not as effectively as one might hope).

I’m surprised to hear of messages being blocked for mere profanity.

Anyway, SMS sucks, default to something else and fall back to SMS as a last resort. Gently encourage your contacts to use Signal.

SMS fallback. A feature which you can use with any app on Android

SMS fallback is not a common feature of internet-based messaging apps on Android. Signal used to do it, but does not now. I don’t think WhatsApp or Telegram ever did.