3 ms·
> Does this use mind-reading or time travel? Which is it? Read my lips. You do not trust the service provider. To be consistent, you do not trust the software
by Andrew_nenakhov 5y ago
> Does this use mind-reading or time travel? Which is it?
Read my lips.
You do not trust the service provider. To be consistent, you do not trust the software provided by this provider. From here, the possibilities are endless. They can just show you some fingerprint numbers so you feel safe, while in practice they might be completely unrelated to the real keys. Or whatever. The keys you verify with your friend Steve might be generated on the very moment you look at them, unrelated to your prior keys that you used 'trusting' the Signal's CA.
> Job #1 if you actually don't want this sort of global surveillance effort to be successful is Don't Stand Out.
That's why just use a plain old email server in TOR network, not tied to your identity. Email blends in juuust fine, certainly much better than centralized silo Signal where your accounts are tied to your identites.
- tialaramex 5y agoYou made a claim ("those who do indeed verify fingerprints are excluded from this program") and "read my lips" doesn't substantiate it. Your claim was in fact just nonsense.
- Andrew_nenakhov 5y agoI was just listing the possibilities, which your paranoia about being spied upon somehow doesn't account for. You have no means to really verify if your communications are being compromised, so you just trust Signal. But at the same time you don't trust Signal and use e2ee. That's schizophrenia.
- hiq 5y ago> You do not trust the service provider. To be consistent, you do not trust the software provided by this provider. These are completely different threat models. You're saying that since you can't have bulletproof security, you might as well have none. This is simply not the case.