3 ms·
Signal's servers have access to your profile, settings, contacts, and block list if the PIN you select has low security.
by buckle8017 2y ago
Signal's servers have access to your profile, settings, contacts, and block list if the PIN you select has low security.
- tptacek 2y agoWhich is to say: in the worst-case plausible failure model for Signal, they get the same metadata access as all the other messengers do. OK!
- fragmede 2y agoThreema leaks no such metadata
- tptacek 2y agohttps://breakingthe3ma.app/ https://breakingthe3ma.app/ You want to use this, by all means.
- rkagerer 2y agoWere any/all of those vulnerabilities mitigated?
- antgiant 2y agoPer the link. Yes. Here the specific statement. Lessons Learned We believe that all of the vulnerabilities we discovered have been mitigated by Threema's recent patches. This means that, at this time, the security issues we found no longer pose any threat to Threema customers, including OnPrem instances that have been kept up-to-date. On the other hand, some of the vulnerabilities we discovered may have been present in Threema for a long time.
- tptacek 2y agoFor what it's worth, and obviously I could have been clearer about this: what's interesting about that link is the description of Threema's design, not the specific vulnerabilities the team found.
- daneel_w 2y agoNot all other messengers require a mobile phone number in order to get access, meaning not all other messengers have a view of users' social networks - some of them are anonymous, and Signal is not. It's a fundamental difference. But we've been here before.
- immibis 2y agoThey kill people based on metadata - they told us so. They don't need the rest.