I genuinely do not understand people who have deep fried opinions about Signal needing a goddamn phone number in 2025.
-
I genuinely do not understand people who have deep fried opinions about Signal needing a goddamn phone number in 2025.
Many privacy nerds were outraged when you needed to give out a phone number to other people in order to talk with them. I was one of those nerds. They fixed that with the usernames rollout.
As a mobile phone app, Signal uses your phone number to bootstrap your enrollment into the protocol. This is literally the path of least resistance as an SMS replacement app, for most users.
If you want to know whether Signal can obtain enough metadata to target users that have enrolled, the answer is complicated.
The way profiles are encrypted, and how sealed sender works, makes any targeting seem infeasible. (Your profile key rotates, at mininum, when you block someone.)
Signal currently does not have IP addresses, etc. stored. If this changes in the future, it will not be retroactive. If you're worried about that, Molly boasts Tor support. Maybe that's fine. I haven't audited Molly, and won't.
-
I genuinely do not understand people who have deep fried opinions about Signal needing a goddamn phone number in 2025.
Many privacy nerds were outraged when you needed to give out a phone number to other people in order to talk with them. I was one of those nerds. They fixed that with the usernames rollout.
As a mobile phone app, Signal uses your phone number to bootstrap your enrollment into the protocol. This is literally the path of least resistance as an SMS replacement app, for most users.
If you want to know whether Signal can obtain enough metadata to target users that have enrolled, the answer is complicated.
The way profiles are encrypted, and how sealed sender works, makes any targeting seem infeasible. (Your profile key rotates, at mininum, when you block someone.)
Signal currently does not have IP addresses, etc. stored. If this changes in the future, it will not be retroactive. If you're worried about that, Molly boasts Tor support. Maybe that's fine. I haven't audited Molly, and won't.
@soatok I don't care how safe or unsafe this is, but I once lost my phone number (basically didn't used it for half a year while I was in different country) and that was painful to restore access to everything tied to that phone number. -
@soatok I don't care how safe or unsafe this is, but I once lost my phone number (basically didn't used it for half a year while I was in different country) and that was painful to restore access to everything tied to that phone number.
@a1ba We refer to this as the mud puddle test, btw
-
@a1ba We refer to this as the mud puddle test, btw
@soatok I just wish there was an alternative. -
@soatok I just wish there was an alternative.
@a1ba IETF's MLS and MIMI might make it possible someday. Until then, we suffer.
-
@a1ba IETF's MLS and MIMI might make it possible someday. Until then, we suffer.
@soatok let's hope
