As Signal get your phone number. Can we considerate this application as private ? What’s your thoughts about it ? I’m also using SimpleX, ElementX, Threema, but not much people using it…

Cheers

  • ☆ Yσɠƚԋσʂ ☆@lemmy.ml
    142·
    6 days ago

    The explanation is obvious. The phone numbers are a personally identifiable network of connections that is available to the people operating Signal servers. If this information is shared with the US government, then they can easily correlate this information with all the other data they have. For example, if somebody is identified as a person of interest then anybody they want to have secure communications would also be of interest.

    • archchan@lemmy.ml
      103·
      5 days ago

      Unlike Whatsapp, Signal doesn’t store your network of contacts. They have your phone number, time of registration, and time of last connect to their servers. They go to great lengths to keep the rest private. In Signal’s case, I don’t see an issue at all, but I do see all the benefit.

      • Dessalines@lemmy.ml
        111·
        5 days ago

        They store your phone number, and have to route all the messages you created to the other phone numbers / user IDs in their database. This means anyone with access to signal’s centralized database has social network graphs: who talked to who, and when.

        If your threat model is “I just trust them”, then its not a good one.

        Privacy advocates have been raising the alarms about signal forever, but like apple, their fanbase just feels the security “in their gut”, and think that because it has a shiny interface, it must be secure.