3 ms·

> but your phone number isn't visible to anyone you chat with. That's irrelevant - the phone number is known to Signal and can be request by law enforcement. A

> but your phone number isn't visible to anyone you chat with. That's irrelevant - the phone number is known to Signal and can be request by law enforcement. And, since it's been made pretty much impossible to buy a SIM in the EU without showing identification [0], this will allow law enforcement to link the account to you. [0] IIRC the Netherlands is the only country left where you can buy SIMs without ID.

Marsymars 2y ago
> That's irrelevant - the phone number is known to Signal and can be request by law enforcement. Maybe I'm missing something here, but if usernames are treated as ephemeral, what's the threat model here?
growse 2y ago
> That's irrelevant - the phone number is known to Signal and can be request by law enforcement. So how does this work? Law enforcement asks signal if they have an account for a phone number, signal saying "yes, here's when they created it". Then what?
- The_Colonel 2y ago
  "Get me all the numbers which talked to X, including all the numbers". You won't get the actual plaintext messages, but the contact graph + metadata (timestamps) are pretty sensitive.
  - growse 2y ago
    Signal doesn't store the graph, nor does it log message timestamps.
    - The_Colonel 2y ago
      How can you know without access to their servers?
- Sebb767 2y ago
  > Law enforcement asks signal if they have an account for a phone number, signal saying "yes, here's when they created it". Law enforcement says that the suspect chatted with some username/told people to contact him by his Signal username, then they go to Signal and request the linked phone number, which is then linked to the ID shown when the card was bought.
  - Marsymars 2y ago
    This only works as long as the username is active/unchanged. It would probably be better if usernames were never linkable to phone numbers, but if your threat model requires a persistent, non-ephemeral username to remain anonymous when targeted by law enforcement that has access to your telecom records and warrants... that's going to require a pretty high level of opsec. The UX on usernames in Signal might be non-ideal. It might be helpful to have a toggle that regularly cycles your username if that's important for your threat model.
g1sm 2y ago
> [0] IIRC the Netherlands is the only country left where you can buy SIMs without ID. As far as I know, in Romania you can still buy and activate a prepaid SIM card without having to show your ID. There was an attempt a few years ago to make it mandatory to tie the phone number to an ID, but it was overruled by the Constitutional Court.
- deleted 2y ago
  [deleted]

Marsymars 2y ago

> That's irrelevant - the phone number is known to Signal and can be request by law enforcement. Maybe I'm missing something here, but if usernames are treated as ephemeral, what's the threat model here?

growse 2y ago

> That's irrelevant - the phone number is known to Signal and can be request by law enforcement. So how does this work? Law enforcement asks signal if they have an account for a phone number, signal saying "yes, here's when they created it". Then what?

The_Colonel 2y ago
"Get me all the numbers which talked to X, including all the numbers". You won't get the actual plaintext messages, but the contact graph + metadata (timestamps) are pretty sensitive.
- growse 2y ago
  Signal doesn't store the graph, nor does it log message timestamps.
  - The_Colonel 2y ago
    How can you know without access to their servers?
Sebb767 2y ago
> Law enforcement asks signal if they have an account for a phone number, signal saying "yes, here's when they created it". Law enforcement says that the suspect chatted with some username/told people to contact him by his Signal username, then they go to Signal and request the linked phone number, which is then linked to the ID shown when the card was bought.
- Marsymars 2y ago
  This only works as long as the username is active/unchanged. It would probably be better if usernames were never linkable to phone numbers, but if your threat model requires a persistent, non-ephemeral username to remain anonymous when targeted by law enforcement that has access to your telecom records and warrants... that's going to require a pretty high level of opsec. The UX on usernames in Signal might be non-ideal. It might be helpful to have a toggle that regularly cycles your username if that's important for your threat model.

g1sm 2y ago

> [0] IIRC the Netherlands is the only country left where you can buy SIMs without ID. As far as I know, in Romania you can still buy and activate a prepaid SIM card without having to show your ID. There was an attempt a few years ago to make it mandatory to tie the phone number to an ID, but it was overruled by the Constitutional Court.

deleted 2y ago
[deleted]