- cross-posted to:
- [email protected]
- cross-posted to:
- [email protected]
cross-posted from : https://lemmy.zip/post/71321898
Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance
There have been too many of these types of events related to signal. And it has so many red flags. You are required to have a phone number which is essentially ur real identity. They used to federate with 3rd party servers but they killed that and all but wiped it from the internet. They try to shut down 3rd party clients. They don’t provide reproducible builds so we can’t trust the source. They received their initial funding from In-Q-Tel the CIA venture capital firm.
Every time someone tries to raise any of these issues they are immediately shut down and told that its all for a good reason and that we should trust it.
At minimum they have a full social graph of real identities with time-stamped message events. Sealed sender doesn’t negate this as signal knows ur ip address when u give them a message. They also know the destination of that message as that isn’t sealed. This is sufficient information to link sender and recipient and timestamp. That’s assuming the unreproducible builds don’t have backdoors.
It’s all got a slightly fishy smell to it.
Tldr: If u want actual secure messaging u should consider SimpleX
There are all of these stories about signal because it is notable when someone gets around it
That there’s anything approaching secure communication on a cell-phone dominated Internet whose.operating systems are either “snobbish walled garden” or “ad agency living in the corpse of a search engine” is astonishing. In the same way that a gun safety that keeps a toddler from shooting themselves with an otherwise loaded gun is astonishing.
Not to quote myself but:
You should trust signal tree the same way you trust a front door lock that has never been broken or picked despite repeated attempts to do both.
.Just remember that police only go through the door when it’s easier than breaking a window or tearing through a wall.
The US government has openly stated they killed people because of metadata and ur comfortable just giving that all away? U also didn’t address any of my precise exact points you simply made a vague deflection.
Signal doesn’t reveal that kind of metadata.
All ur messages have a recipient address. All ur messages go though signal servers. You have an IP address that u communicate to said servers with. They know when and who you are messaging.
can’t get around simplex encryption unless you have physical access to the device or have been physically invited by a member.
Ok so no better than Signal?
You can do all the same things and use Tor, allow Sealed sender, and rotate username with phone number hidden.
Why does Simplex want investors?
what company doesn’t want to grow or maintain services? they host the primary servers that everyone uses, that costs money.
you could host your own though. can you do that with signal?
If I only want to talk to my own group of people registered on my server yes
https://github.com/signalapp/Signal-Server
as I pointed out in your other comment. signal uses a database, fails to explain why a database is required, and doesn’t even make a mention of it in their technical information.
why use a database at all? that just introduces more attack surface area and complexity for attackers to leverage.
Yeah precisely you didn’t check what it’s for. It doesn’t hold conversation data or even metadata.
what 👏 is 👏 it 👏 used 👏 for