Comment on The Guardian and the University of Cambridge Computer Science Department unveil new technology to protect journalists

• papertowels@mander.xyz ⁨10⁩ ⁨months⁩ ago

  How are they analyzing network traffic with Signal? It’s encrypted

  Again, not my specialty, but signals end to end encryption is akin to sealing a letter. Nobody but the sender and the recipient can open that letter.

  But you still gotta send it through the mail. That’s the network traffic analysis that can be used.

  Here’s an example of why that could be bad.

  source
• DeathByBigSad@sh.itjust.works ⁨10⁩ ⁨months⁩ ago

  [deleted]

  source

  • Ulrich@feddit.org ⁨10⁩ ⁨months⁩ ago

    It isn’t.

    source

    • Diurnambule@jlai.lu ⁨10⁩ ⁨months⁩ ago

      laquadrature.net/…/criminalization-of-encryption-…

      For France, Your a terroriste if you use signal

      source

      • phoenixz@lemmy.ca ⁨10⁩ ⁨months⁩ ago

        Then you’re a terrorist if you use the internet, period

        Nearly all internet traffic if encrypted, and for plain browser traffic it’s probably in the 95+%

        You access your bank? Terrorist! Email? Terrorist! Lemmy? Terrorist!

        source

        • -> View More Comments
      • Ulrich@feddit.org ⁨10⁩ ⁨months⁩ ago

        Then you’re also a terrorist if you use The Guardian 🤷‍♂️

        source

        • -> View More Comments
    • eronth@lemmy.world ⁨10⁩ ⁨months⁩ ago

      It’s a red flag to those who think you’re going to share internal info.

      source

      • Ulrich@feddit.org ⁨10⁩ ⁨months⁩ ago

        Or it’s just a perfectly normal thing that billions of people do every day?

        source

        • -> View More Comments
• Natanael@infosec.pub ⁨10⁩ ⁨months⁩ ago

  Timing of messages. They can’t tell what you send, but can tell when

  source

  • Ulrich@feddit.org ⁨10⁩ ⁨months⁩ ago

    No they can’t.

    source

    • papertowels@mander.xyz ⁨10⁩ ⁨months⁩ ago

      Here’s a relevant stack exchange question. Regarding what an ISP can learn. Of note, everybody is ceding that the ISP can tell you’re using signal, and they’ve moved on to whether or not they’d be able to fingerprint your usage patterns.

      source
    • Natanael@infosec.pub ⁨10⁩ ⁨months⁩ ago

      It’s called traffic analysis

      source

      • Ulrich@feddit.org ⁨10⁩ ⁨months⁩ ago

        It’s called encryption

        source

        • -> View More Comments