5 ms·

How is Signal a questionable technology? I do understand whatsapp and telegram though.

by ath3nd 3y ago

protomolecule 3y ago
Signal Facing Collapse After CIA Cuts Funding [0] [0] https://kitklarenberg.substack.com/p/signal-facing-collapse-after-cia https://kitklarenberg.substack.com/p/signal-facing-collapse-...
justinclift 3y ago
It's a US based organisation isn't it? So all the standard US problems (national security letters, etc) would seem to apply.
- wolverine876 3y ago
  Signal claims to only have the phone number and, IIRC, last connection time. But being American they seem at least somewhat vulnerable to pressure by the US government.
bboygravity 3y ago
Hypothesis yet plausible scenario: Signal is actually a NSA/CIA-run honeypot. As far as I know, nobody knows (for sure) what software runs on the official Signal servers. Only the official client app can be used to communicate with ONLY the Signal server. US law (as far as I know) forces ALL US-based organizations (including non-profits) to cooperate with any and all government agencies, without being legally allowed to publicly admit or disclose that they're doing so. Thanks to Snowden we know that this has happened A LOT in the past. After Snowden, when exactly did the NSA stop illegally spying on everybody? ... Exactly... With the above in mind it is possible that all Signal traffic is not actually e2e encrypted and is instead decrypted and re-encrypted at the server. A less "far fetched" version of the above would be that there are simply known vulnerabilities in the Signal client app (and/or Android and/or iOS and/or other apps) that governments are exploiting to see all decrypted Signal communications. IMO it would be extremely dumb for an EU country to voluntarily use software made in the US or in any other country if it isn't FULLY open source and FULLY audited (and compiled from source) by the EU country itself. Just like it is extremely dumb that EU-based companies are PAYING to upload their own trade secrets to their direct competitors in the US through OneDrive. If you think that the above is far-fetched, read this: https://www.swissinfo.ch/eng/politics/switzerland-closes-investigation-into-cia-linked-encryption-firm/46237576 https://www.swissinfo.ch/eng/politics/switzerland-closes-inv...

How is Signal a questionable technology? I do understand whatsapp and telegram though.

by ath3nd 3y ago

How is Signal a questionable technology? I do understand whatsapp and telegram though.

Signal Facing Collapse After CIA Cuts Funding [0] [0] https://kitklarenberg.substack.com/p/signal-facing-collapse-after-cia https://kitklarenberg.substack.com/p/signal-facing-collapse-...

justinclift 3y ago

It's a US based organisation isn't it? So all the standard US problems (national security letters, etc) would seem to apply.

wolverine876 3y ago
Signal claims to only have the phone number and, IIRC, last connection time. But being American they seem at least somewhat vulnerable to pressure by the US government.

bboygravity 3y ago

Hypothesis yet plausible scenario: Signal is actually a NSA/CIA-run honeypot. As far as I know, nobody knows (for sure) what software runs on the official Signal servers. Only the official client app can be used to communicate with ONLY the Signal server. US law (as far as I know) forces ALL US-based organizations (including non-profits) to cooperate with any and all government agencies, without being legally allowed to publicly admit or disclose that they're doing so. Thanks to Snowden we know that this has happened A LOT in the past. After Snowden, when exactly did the NSA stop illegally spying on everybody? ... Exactly... With the above in mind it is possible that all Signal traffic is not actually e2e encrypted and is instead decrypted and re-encrypted at the server. A less "far fetched" version of the above would be that there are simply known vulnerabilities in the Signal client app (and/or Android and/or iOS and/or other apps) that governments are exploiting to see all decrypted Signal communications. IMO it would be extremely dumb for an EU country to voluntarily use software made in the US or in any other country if it isn't FULLY open source and FULLY audited (and compiled from source) by the EU country itself. Just like it is extremely dumb that EU-based companies are PAYING to upload their own trade secrets to their direct competitors in the US through OneDrive. If you think that the above is far-fetched, read this: https://www.swissinfo.ch/eng/politics/switzerland-closes-investigation-into-cia-linked-encryption-firm/46237576 https://www.swissinfo.ch/eng/politics/switzerland-closes-inv...