Kinda of a poor write up. I have my issues with this but signal doesn't really use phone numbers internally, it uses hashes of phone numbers. It's not as straight forward as this article makes it seem, and this is readily available information that the author could have found.
Hashing doesn't really do anything because there are too few possible phone numbers. Easy to bruteforce. See the researchers who enumerated the WhatsApp users database recently via the internet...
My vague memory is that Signal doesn't keep that information, so it couldn't be subpeona'd, indeed they've been asked for it before and declined to share.
BUT IT'S MOOT IF YOUR MESSAGES ARE VIEWED by sender or receiver ON ANDROID, WINDOWS OR IOS. Those operating systems can just view everything you type regardless.
Should've known this was going to be an ad for SimpleX. They have a hard-on for anti-Signal content. It's nearly as laughable as GrapheneOS's hate for anything not GrapheneOS.
In addition to that, in most European countries you have to register with your ID in oder to get a mobile phone number. So its provably end-to-end related to your identity.
I prefer apps that require no phone number. Like Threema, SimpleX, Session, Status, XMPP, or Tox.
13 Comments
wildbus8979@sh.itjust.works · 17 pts · 295d
Kinda of a poor write up. I have my issues with this but signal doesn't really use phone numbers internally, it uses hashes of phone numbers. It's not as straight forward as this article makes it seem, and this is readily available information that the author could have found.
gtr@programming.dev · 6 pts · 294d
Hashing doesn't really do anything because there are too few possible phone numbers. Easy to bruteforce. See the researchers who enumerated the WhatsApp users database recently via the internet...
IceFoxX@lemmy.world · 1 pts · 294d
staircase@programming.dev · 9 pts · 295d
My vague memory is that Signal doesn't keep that information, so it couldn't be subpeona'd, indeed they've been asked for it before and declined to share.
BUT IT'S MOOT IF YOUR MESSAGES ARE VIEWED by sender or receiver ON ANDROID, WINDOWS OR IOS. Those operating systems can just view everything you type regardless.
gtr@programming.dev · 2 pts · 294d
How does signal match your contacts based on their phone number then?
staircase@programming.dev · 1 pts · 294d
Hence "vague memory". I don't know.
ReversalHatchery@beehaw.org · 1 pts · 294d
by having you trust intel instead of themselves: https://signal.org/blog/private-contact-discovery/
gtr@programming.dev · 1 pts · 294d
Oh but that's still better than I expected.
Kolanaki@pawb.social · 6 pts · 295d
I would hope so. It's facilitating us talking; it kinda has to know who I am trying to talk to.
onlinepersona@programming.dev · 6 pts · 295d
Should've known this was going to be an ad for SimpleX. They have a hard-on for anti-Signal content. It's nearly as laughable as GrapheneOS's hate for anything not GrapheneOS.
gtr@programming.dev · 2 pts · 294d
SimpleX is good tho.
onlinepersona@programming.dev · 1 pts · 294d
Sure, if you like Nazis
gtr@programming.dev · 1 pts · 294d
Sorry what?
gtr@programming.dev · 5 pts · 294d
In addition to that, in most European countries you have to register with your ID in oder to get a mobile phone number. So its provably end-to-end related to your identity.
I prefer apps that require no phone number. Like Threema, SimpleX, Session, Status, XMPP, or Tox.
IceFoxX@lemmy.world · 3 pts · 294d
IceFoxX@lemmy.world · 1 pts · 295d