3 ms·
They’re trying to unwind Signal from phone numbers. Also who uses SMS anymore?:)
by rzz3 6y ago
They’re trying to unwind Signal from phone numbers. Also who uses SMS anymore?:)
- autoexec 6y agoThe phone number is not even the worst part really. Signal's privacy policy says they don't collect and store sensitive info, but how is a list of everyone you've been in contact with not sensitive? Sadly I've had very little luck getting my family to move to Signal and less luck getting them to use Jami. The bulk of my communications are unsecured SMS/MMS. It's such a basic function that I'm surprised open source solutions aren't better. Whatever they've become Signal had a pretty great interface.
- tmp538394722 6y agoit’s hard for me to read something like this and believe you aren’t being deliberately misleading. All this stuff is only stored in an encrypted form that signal never has the keys for.
- autoexec 6y agoThe fact that's encrypted doesn't matter. There are a number of potential issues with collecting it in the first place. You can see some of the security concerns which were brought up on their forums here: https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 https://community.signalusers.org/t/proper-secure-value-secu...
- jerry1979 6y agoAs far as I know, they encrypt the data in sgx enclaves which are notoriously leaky.
- laretluval 6y agoThey've been trying since 2014. Somehow it never seems to happen.
- goatsi 6y agoThat's because (secure) messaging using phone numbers as identifiers is literally the core feature of the product. Signal was marketed from day one as a drop in SMS replacement. Initially it even used SMS as the transport for encrypted messages. It was even originally called "TextSecure". This is why I have always found the attacks on it using phone numbers to be amusing.