3 ms·
Worse, they store your phone number (along with your name, your photo, and most damning of all, a list of all of your signal contacts) permanently in the cloud.
by autoexec 3y ago
Worse, they store your phone number (along with your name, your photo, and most damning of all, a list of all of your signal contacts) permanently in the cloud. This is exactly the information they used to brag about not being able to turn over to the authorities because they didn't collect it in the first place. Their website still has pages that brag about that with no indication that it's no longer the truth.
I've seen way too many signal users who had no idea this data collection was even happening which is a good sign that Signal isn't very trustworthy. If you're going to promote yourself to whistleblowers and activists, they need to know what data you're collecting and what their risks are, but ever since Signal started collecting all this data they've refused to update their privacy policy which even now starts with "Signal is designed to never collect or store any sensitive information." which is an outright lie. I'm pretty sure at this point it's a dead canary warning people not to trust the service. They've been very unclear in their communications about the data collection too.
They've removed features people loved (the ability to get secure communications and unsecured SMS/MMS in a single app) and they've pushed weird crypto features nobody asked for, which might be another sign they're trying to encourage users to leave the platform, but I sure see them come up a lot in the news. Signal seems to get a lot of promotion. At this point though, people looking for secure communication might want to look for something else.
For more info see:
https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 https://community.signalusers.org/t/proper-secure-value-secu...
https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 https://community.signalusers.org/t/dont-want-pin-dont-want-...
https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/fyjy7a5/ https://old.reddit.com/r/signal/comments/htmzrr/psa_disablin...
- edrxty 3y agoSignal is very much a first generation private messaging application (in the sense that it was the first generation actually adopted). I think we're starting to see true gen 2 protocols rise to fix some of the issues it has like matrix, berty, briar, etc.