Hey signal is better than most of the mainstream bs. I use it myself and I’m confident that the messages themselves are secure. However, everything I said is 100% true.
Since we cannot verify the software they run on the server is the software that is open source then we must assume it is not.
We know for a majority of cases a phone number = a real identity. Signal implements sealed sender but since signal is a centralised point they can correlate the sealed sender extraordinarily easily. We must therefore assume signal knows when and who is communicating (We can verify they don’t know what is being said) this therefore means signal could theoretically have a full social graph of real identities for every singe user.
This is of course after we remember signal received funding from BBG which is an organisation funded by the us government purely for the purpose of promoting american propaganda.
Its not FUD its true. Signal can either adapt and prove themselves with more than a “trust me bro” or they can die. Just cos they are better than the alternatives does not mean we should not demand better.
I don’t see how enabling federation will fix the problem of not knowing what is running on their servers. You’ve just introduced a new problem: other servers, with their own rules, which may also be peppered with requests for data and gag orders.
muntedcrocodile@lemm.ee 2 months ago
Hey signal is better than most of the mainstream bs. I use it myself and I’m confident that the messages themselves are secure. However, everything I said is 100% true.
Since we cannot verify the software they run on the server is the software that is open source then we must assume it is not.
We know for a majority of cases a phone number = a real identity. Signal implements sealed sender but since signal is a centralised point they can correlate the sealed sender extraordinarily easily. We must therefore assume signal knows when and who is communicating (We can verify they don’t know what is being said) this therefore means signal could theoretically have a full social graph of real identities for every singe user.
This is of course after we remember signal received funding from BBG which is an organisation funded by the us government purely for the purpose of promoting american propaganda.
Its not FUD its true. Signal can either adapt and prove themselves with more than a “trust me bro” or they can die. Just cos they are better than the alternatives does not mean we should not demand better.
LWD@lemm.ee 2 months ago
I don’t see how enabling federation will fix the problem of not knowing what is running on their servers. You’ve just introduced a new problem: other servers, with their own rules, which may also be peppered with requests for data and gag orders.
muntedcrocodile@lemm.ee 2 months ago
It enables me to run my own server. And sealed sender is more effective with more servers as their is no centralised point that can identify senders.
And that’s not a new problem if the security is as promised the point is u don’t need to trust the server.