230, or not 230? That is the EARN IT question
1–10 of 178 posts
Re: 230, or not 230? That is the EARN IT question
#2Is signal still demonstrating their commitment to my privacy by notifying everyone with my number in their phone contacts who is also on signal when I join ?
Re: 230, or not 230? That is the EARN IT question
#3Is signal still demonstrating their commitment to my privacy by notifying everyone with my number in their phone contacts who is also on signal when I join ?
That’s a good question I’d like to know, too. Perhaps they hash the phone numbers then compare to their master list for matches?
Re: 230, or not 230? That is the EARN IT question
#4Is signal still demonstrating their commitment to my privacy by notifying everyone with my number in their phone contacts who is also on signal when I join ?
That’s a good question I’d like to know, too. Perhaps they hash the phone numbers then compare to their master list for matches?
That's hardly helpful if I just don't want people who happen to have my number to know I'm using signal.
Re: 230, or not 230? That is the EARN IT question
#5Is signal still demonstrating their commitment to my privacy by notifying everyone with my number in their phone contacts who is also on signal when I join ?
That’s a good question I’d like to know, too. Perhaps they hash the phone numbers then compare to their master list for matches?
Hashing phone numbers isn't useful for privacy. You can test the entire space of 10^10 phone numbers against a list of hashes in hours, and you only have to do that step once.
Re: 230, or not 230? That is the EARN IT question
#6Earlier quoted context omitted.
That’s a good question I’d like to know, too. Perhaps they hash the phone numbers then compare to their master list for matches?
That's hardly helpful if I just don't want people who happen to have my number to know I'm using signal.
How would a messaging app work without contact discovery? You try a friend's number, and see if the message goes through? Well if that's what you want, then you can do this for all your phonebook numbers, and all the ones that go through are on Signal, and all the ones that error are not. Oops, you've reinvented contact discovery.
Re: 230, or not 230? That is the EARN IT question
#7Is signal still demonstrating their commitment to my privacy by notifying everyone with my number in their phone contacts who is also on signal when I join ?
That’s a good question I’d like to know, too. Perhaps they hash the phone numbers then compare to their master list for matches?
They use Intel SGX to keep themselves from being able to access their users' contact lists.
Still, one has to possess and reveal a valid phone number to use the service. This must help to grow the user base.
Re: 230, or not 230? That is the EARN IT question
#8Earlier quoted context omitted.
That's hardly helpful if I just don't want people who happen to have my number to know I'm using signal.
How would a messaging app work without contact discovery? You try a friend's number, and see if the message goes through? Well if that's what you want, then you can do this for all your phonebook numbers, and all the ones that go through are on Signal, and all the ones that error are not. Oops, you've reinvented contact discovery.
A. You can design it in such a way so that sending a message to a non-user is indistinguishable from having a user see it and not reply/acknowledge it.
B. You can exchange identifiers with people whom you want to communicate it just like with any other non-phone-based system: "Hey I'm @username on signal", "Cool, I'm @username2" - composes well with method A.
Re: 230, or not 230? That is the EARN IT question
#9Is signal still demonstrating their commitment to my privacy by notifying everyone with my number in their phone contacts who is also on signal when I join ?
Why is this downvoted?
Re: 230, or not 230? That is the EARN IT question
#10Earlier quoted context omitted.
That’s a good question I’d like to know, too. Perhaps they hash the phone numbers then compare to their master list for matches?
They use Intel SGX to keep themselves from being able to access their users' contact lists. Still, one has to possess and reveal a valid phone number to use the service. This must help to grow the user base.
This misses the point, just because someone sometimes added me to their phone contacts and uses signal does not mean I want them notified when I start using signal too.