Live data from Hacker News

Create an anonymous Signal phone number with Android

yawnbox.com

11–20 of 38 posts

Re: Create an anonymous Signal phone number with Android

#11
post #5

I'm curious why Whisper Systems aren't allowing registration with just a handle instead of tying accounts to a PSTN number. Telegram already allows this.

> Telegram already allows this. No it doesn't. You can have a handle, but only after verifying a number first.

And Telegram is not secure anyways: https://security.stackexchange.com/questions/49782/is-telegr...

Check out Threema for a secure alternative that doesn't require a phone number: https://en.wikipedia.org/wiki/Threema

Re: Create an anonymous Signal phone number with Android

#13
I don't see the problem to begin with.

The question with anonymity and data securing always is - "who do you want to protect against?"

No matter how you set up Signal it's not going to help you against intelligence agencies - they'll just hack into your Android or use the available backdoors in your I- or Windows Phone.

Signal is very good (the best?) to encrypt your messages and to sabotage mass surveillance which aims at content analysis. Also not any random bored Data Scientist at WhatsApp will be able to read your stuff.

Controlling your meta-data is absolutely impossible with your day-to-day-smartphone anyway. You'd have to use stolen phones and SIM cards.

In my opinion it ALL comes down to establishing online best practices to keep suspicion-independent mass surveillance at bay. The rest is politics - if your police is super corrupt - they'll just break your fingers until you give them access to what they want.

Re: Create an anonymous Signal phone number with Android

#14

This is stupid. Wants to be anonymous, uses Google. Google records your calls, the number of times you access their service, the messages, the IP address you are using and happily shares this information with your favorite government information service. Wake up. If you are not paying for the service from Google, YOU are the service..

The point is creating a new network identity that is not connected to your public identity, and let Google etc track it all they want. So it's pseudonymous more than anonymous.

Re: Create an anonymous Signal phone number with Android

#15
post #14

This is stupid. Wants to be anonymous, uses Google. Google records your calls, the number of times you access their service, the messages, the IP address you are using and happily shares this information with your favorite government information service. Wake up. If you are not paying for the service from Google, YOU are the service..

The point is creating a new network identity that is not connected to your public identity, and let Google etc track it all they want. So it's pseudonymous more than anonymous.

They'll still track you by correlating your Signal meta-data with that resulting from your usage of other Google services where you are "onymous".

Re: Create an anonymous Signal phone number with Android

#16
post #10

I think, that it's not that anonymous. Weak spots: 1. I wouldn't recommend buying used devices, you don't know what has been done with the device, what's running there, even if you reflash it from scratch. Try to buy somehow (anonymously) device in still original and sealed packaging. 2. One would need to first install modified AOSP/CyanogenMod with patched core libraries/apps/services to return fake/random values fo…

1. the chances that a random old device you bought at a fleamarket with cash is pre-loaded with an attack package thats targeted to you is low. Lower than say ordering a phone in its "originaly sealed" package. Since Snowden we know that Hardware is intercepted and modified. I am sure the package looks sealed afterwards.

2.Installing a ROM without the normal Google apps is something that is beneficial for this application.

3. in all the android phones i have taken apart the various antennas are easy to identify and remove. they are part of the back shell and can be peeled off or are sitting on their own little module that can be left out of the phone.

Re: Create an anonymous Signal phone number with Android

#17
post #14

Earlier quoted context omitted.

The point is creating a new network identity that is not connected to your public identity, and let Google etc track it all they want. So it's pseudonymous more than anonymous.

They'll still track you by correlating your Signal meta-data with that resulting from your usage of other Google services where you are "onymous".

You mustn't use your "onymous" Google ID on this burner phone, nor have any contact between your pseudonymous Google ID and your public Google ID. I guess the guide should spell this out more, I took it as implied when the guide started by buying a non-trackable phone with cash.

Edit: quote from the guide: "11. Only use this device for Signal (and maybe Google Authenticator, see #13) from now on to minimize its exposure."

Re: Create an anonymous Signal phone number with Android

#18
It seems pointless to go through that exercise if you're going to share that phone number with people who doesn't share your dedication to OPSEC (for a fictional argument, recall Zero Dark Thirty where they essentially find OBL because a guy calls his mother). And once you're there, you don't need PSTN numbers, which means you can leave Google out of the equation.

Re: Create an anonymous Signal phone number with Android

#19
It feels like the steps taken to improve anonymity are really arbitrary, without any particular threat model.

'Randomly' taking a bus you never take to a city you've never been to and never go to again just to buy a phone, sit in a coffee shop for 5 minutes, and go home, sounds like a good way to make someone pay attention to what you're doing.

And if you think that's too much paranoia, I'm pointing it out because number 8 on this list says 'never use the phone from a place you routinely go', which feels like it's on a similar level.

Re: Create an anonymous Signal phone number with Android

#20

I don't see the problem to begin with. The question with anonymity and data securing always is - " who do you want to protect against?" No matter how you set up Signal it's not going to help you against intelligence agencies - they'll just hack into your Android or use the available backdoors in your I- or Windows Phone. Signal is very good (the best?) to encrypt your messages and to sabotage mass surveillance which…

Try harder.

Pretend there's a phone on my desk now that was bought by someone else via ebay and reflashed to cyanogenmod. There actually was, its owner forgot it while visiting, but you can pretend that you're a powerful snooping government and that's my secret phone that you want to hack. Not registered in my name, not purchased by me, maybe there's not even a SIM card in the phone. How do you go about "just hacking into" that phone or using the "available backdoors"?

Post reply on HN