> And although the attack was formally a success, there is no reason to get scared and stop using Signal. This conclusion — “no reason to…” — sounds strange an

> And although the attack was formally a success, there is no reason to get scared and stop using Signal. This conclusion — “no reason to…” — sounds strange and premature. Such attacks may not get older messages, but contacts of the person whose phone number has been used can still message the new device, which the hacker would get and could launch further attacks on the contacts. Since practically almost nobody verifies “safety number” changes, the contacts of the phone number that has been taken over may not realize they’re chatting with someone else. Isn’t that reason enough to be scared? This problem exists for any app that relies on an external identifier, especially one like a phone number that’s easier to take over (including through SIM jacking). Signal may be secure for specific definitions, but your contacts may not be safe with such takeovers.