As Signal get your phone number. Can we considerate this application as private ? What’s your thoughts about it ? I’m also using SimpleX, ElementX, Threema, but not much people using it…
Cheers
As Signal get your phone number. Can we considerate this application as private ? What’s your thoughts about it ? I’m also using SimpleX, ElementX, Threema, but not much people using it…
Cheers
No one that has told me this has ever been able to offer up any sort of explanation, but please do feel free to give it ago.
SS7 hacking can intercept your calls and text messages as well as your location just by knowing your phone number.
https://youtu.be/wVyu7NB7W6Y
Multiple-accounts and pseudonyms. It’s like the 101 of interacting on the Internet. With a phone number requirement that’s automatically made impossible.
Also SIM-cards/phone numbers are required by law to be attached to your real world identity in many countries.
What about them?
Why is that a problem?
Why are you posting as artyom@piefed.social and not <real name>@<home address>?
…because this is not a private message? And because my home address is not a piefed server. Such a weird question…
The explanation is obvious. The phone numbers are a personally identifiable network of connections that is available to the people operating Signal servers. If this information is shared with the US government, then they can easily correlate this information with all the other data they have. For example, if somebody is identified as a person of interest then anybody they want to have secure communications would also be of interest.
Unlike Whatsapp, Signal doesn’t store your network of contacts. They have your phone number, time of registration, and time of last connect to their servers. They go to great lengths to keep the rest private. In Signal’s case, I don’t see an issue at all, but I do see all the benefit.
The only people who know what the server stores are the people running it.
They store your phone number, and have to route all the messages you created to the other phone numbers / user IDs in their database. This means anyone with access to signal’s centralized database has social network graphs: who talked to who, and when.
If your threat model is “I just trust them”, then its not a good one.
Privacy advocates have been raising the alarms about signal forever, but like apple, their fanbase just feels the security “in their gut”, and think that because it has a shiny interface, it must be secure.