Viewing profile — jlund

Hey, HN. While I was helping a friend set up their new iPhone, I noticed that they were prompted to upgrade to a newer version of iOS. When I checked my own phone, I saw that the u…

The Nginx configs use modules that are not compiled by default, so most preexisting Nginx binaries in mainstream distros won't work.

Does this help? https://signal.org/docs/

Just to clarify, the bug you're talking about was in WebRTC. We submitted a patch upstream: https://webrtc-review.googlesource.com/c/src/+/175960

Google Play Services aren't required to run Signal on Android either.

https://signal.org/blog/license-update/

Nice breakdown! Just to clarify, in step 2 of your "Recovery of the secret (by the client)" section, the client is retrieving `split2`, not `split1`.

You can read more about the Registration Lock feature here: https://support.signal.org/hc/en-us/articles/360007059792-Re...

The Contacts permission is completely optional, and contact information is never stored: https://signal.org/blog/private-contact-discovery/

It does. Signal supports runtime permissions[1] and it requests them dynamically while you are using the app (e.g. the camera permission prompt appears the first time you try to ta…

Everything in Signal is end-to-end encrypted.

I was incorrect about this, and I apologize.

Just one additional note that might not be immediately clear from the advisory: Exploiting this requires the attacker to first manually place malware (a malicious JavaScript file) …

If the solution to censorship is to constantly switch to new hosts, it would be even easier to do this via a VPN (which wouldn't require you to rebuild your social graph at all, un…

> Time to look for another option then That's the plan. This is covered briefly in the second-to-last paragraph. > so it was never really viable Signal remained running for more th…

Let's say I have an account on a federated server and a censor then blocks my ability to access that server from my home country. While it's true that my friends on other servers m…

The loss of domain fronting as a viable strategy means that it will be possible to censor Signal in areas where the service was previously working.

An aspiring censor could also "easily connect to the broader network" and masquerade as a federated server in order to discover others. This process could even be automated. Federa…

The technique that Signal was using to circumvent censorship (domain fronting) will no longer be possible on Amazon: https://aws.amazon.com/blogs/security/enhanced-domain-protec...…

Unfortunately, federation is not an effective tactic against censorship: https://news.ycombinator.com/item?id=16871352

The relevant text is in the subject line of the email: "Notification of potential account suspension regarding AWS Service Terms"

It's trivial to block several distributed hosts simultaneously. An aspiring censor would simply find the most common federated endpoints for a given service and block all of them. …

Hey, everyone. We spent a decent amount of time at Signal trying to come up with alternatives when we first heard rumors that Google was disabling domain fronting on GAE. We're usi…

Signal takes metadata protection very seriously: https://signal.org/bigbrother/