6 ms·

I have nothing against Signal, Moxie, etc — but it attracts high-value targets. As such, Signal is an extremely high-value target. >> Signal knows nothing abou

I have nothing against Signal, Moxie, etc — but it attracts high-value targets. As such, Signal is an extremely high-value target. >> Signal knows nothing about who you are. This is based on trust, not systematic proofs, Signal knows this, yet never tells its users. For example, Signal uses Intel’s Software Guard Extensions (SGX) - which is know to have multiple attacks, any of which Signal might be forced to run using national security letter. They have also had multiple data breaches, which I am guessing average user is not aware of. Moxie is still on the board, and he personally refused multiple times to remove the requirement for a phone number. Lastly, Signals three board members have all been the leader of Signal in last year and I have been unable to find their most recent 990 non-profit disclosure.

password4321 4y ago
Signal does marketing by omission: "Intel’s SGX protects against introspection", "we depend on donations from our community", etc.
- O__________O 4y ago
  Would it be possible for you to expand on Signal not being dependent on donations?
  - adamch 4y ago
    They also received a very large amount of funding from some successful tech founders, Brian Acton and Pavel Durov
    - O__________O 4y ago
      My understanding was that the funds from Brian Acton were a loan to be repaid, though might be wrong. I was unable to quickly locate any information relate to Pavel Durov having any financial relationship with Signal.
  - password4321 4y ago
    "we depend on donations from our community" + a $105 million 0% interest loan (until 2068)¹. ¹ https://en.wikipedia.org/wiki/Brian_Acton#Signal https://en.wikipedia.org/wiki/Brian_Acton#Signal
    - O__________O 4y ago
      Are you suggesting Signal should not repay their debts or the best time to do that is not as soon as possible? If not, regardless of if there’s no interest, that loan should be repaid as soon as possible in my opinion. In my opinion, 990s are public, that loan was publicly acknowledged, and see no issue with a non-profit raising donations or repaying their debts. All that said, if it was up to me, Signal would have their 990s on their site, annual publicly shared audits, etc. - which to my knowledge they do not.
      - password4321 4y ago
        > Are you suggesting Signal should not repay their debts or the best time to do that is not as soon as possible? Cutting through the tug-at-the-heartstrings sales pitch: Signal does not currently "depend on donations", nor will they for at least 45 more years. It is reasonable to expect the entire truth when asked for money, instead of getting Wikipedia'd.
snowwrestler 4y ago
> any of which Signal might be forced to run using national security letter. NSLs can demand information but cannot compel action. The govt cannot use an NSL to force you into military service, for example, or force you to hack someone else’s computer (which is essentially what you are suggesting).
- O__________O 4y ago
  Regardless if they were “compeled” - nation security letter related activities have included actions. For example, this included a room and split: - https://wikipedia.org/wiki/33_Thomas_Street https://wikipedia.org/wiki/33_Thomas_Street My understanding is that vendors that execute national security letters offer system integration technology to be locally installed to ingest the related data. Signal has the data, it just requires them collecting it — hence my statement that Signal’s security is based on trust, not physics, math, etc.
  - tssva 4y ago
    Those actions were not the result of a national security letter. NSLs can only require the production of existing records. They cannot require the release of the content of communications nor the collection of records which don't already exist. They must also specify the time period the records request covers which can only include up to the date the NSL was received.
    - O__________O 4y ago
      As I said, they’re related. That is All Writs Act is a United States federal statute, codified at 28 U.S.C. § 1651, which authorizes the United States federal courts to issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law. A writ is a form of written command in the name of a court or other legal authority to act, or abstain from acting, in some way. Also my understanding that the National Security Letters vendors can simply reissue them automatically to maintain persistent data feeds. Disclosing actions taken via All Writs Act to enable national security letters would likely be a disclosure of them similar to warrant canary.
benhurmarcel 4y ago
> Signal is rapid on its way to a billion users The last number I could find is 40 million in 2021
- O__________O 4y ago
  You’re correct; removed that from comment, not sure where I got that from, but was unable to find anything quickly that would be anywhere near billion.
sneak 4y ago
That's not how NSLs work.
deleted 4y ago
[deleted]

password4321 4y ago

Signal does marketing by omission: "Intel’s SGX protects against introspection", "we depend on donations from our community", etc.

O__________O 4y ago
Would it be possible for you to expand on Signal not being dependent on donations?
- adamch 4y ago
  They also received a very large amount of funding from some successful tech founders, Brian Acton and Pavel Durov
  - O__________O 4y ago
    My understanding was that the funds from Brian Acton were a loan to be repaid, though might be wrong. I was unable to quickly locate any information relate to Pavel Durov having any financial relationship with Signal.
- password4321 4y ago
  "we depend on donations from our community" + a $105 million 0% interest loan (until 2068)¹. ¹ https://en.wikipedia.org/wiki/Brian_Acton#Signal https://en.wikipedia.org/wiki/Brian_Acton#Signal
  - O__________O 4y ago
    Are you suggesting Signal should not repay their debts or the best time to do that is not as soon as possible? If not, regardless of if there’s no interest, that loan should be repaid as soon as possible in my opinion. In my opinion, 990s are public, that loan was publicly acknowledged, and see no issue with a non-profit raising donations or repaying their debts. All that said, if it was up to me, Signal would have their 990s on their site, annual publicly shared audits, etc. - which to my knowledge they do not.
    - password4321 4y ago
      > Are you suggesting Signal should not repay their debts or the best time to do that is not as soon as possible? Cutting through the tug-at-the-heartstrings sales pitch: Signal does not currently "depend on donations", nor will they for at least 45 more years. It is reasonable to expect the entire truth when asked for money, instead of getting Wikipedia'd.

snowwrestler 4y ago

> any of which Signal might be forced to run using national security letter. NSLs can demand information but cannot compel action. The govt cannot use an NSL to force you into military service, for example, or force you to hack someone else’s computer (which is essentially what you are suggesting).

O__________O 4y ago
Regardless if they were “compeled” - nation security letter related activities have included actions. For example, this included a room and split: - https://wikipedia.org/wiki/33_Thomas_Street https://wikipedia.org/wiki/33_Thomas_Street My understanding is that vendors that execute national security letters offer system integration technology to be locally installed to ingest the related data. Signal has the data, it just requires them collecting it — hence my statement that Signal’s security is based on trust, not physics, math, etc.
- tssva 4y ago
  Those actions were not the result of a national security letter. NSLs can only require the production of existing records. They cannot require the release of the content of communications nor the collection of records which don't already exist. They must also specify the time period the records request covers which can only include up to the date the NSL was received.
  - O__________O 4y ago
    As I said, they’re related. That is All Writs Act is a United States federal statute, codified at 28 U.S.C. § 1651, which authorizes the United States federal courts to issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law. A writ is a form of written command in the name of a court or other legal authority to act, or abstain from acting, in some way. Also my understanding that the National Security Letters vendors can simply reissue them automatically to maintain persistent data feeds. Disclosing actions taken via All Writs Act to enable national security letters would likely be a disclosure of them similar to warrant canary.

benhurmarcel 4y ago

> Signal is rapid on its way to a billion users The last number I could find is 40 million in 2021

O__________O 4y ago
You’re correct; removed that from comment, not sure where I got that from, but was unable to find anything quickly that would be anywhere near billion.

sneak 4y ago

That's not how NSLs work.

deleted 4y ago

[deleted]