151–160 of 618 posts
What worries me is that even though they don't own the data, they could be forced to push an update that will upload decrypted messages from people's phones. Not owning the client would be better
Earlier quoted context omitted.
It's not a dead end with Signal. But it requires field work, as they used to do 50 years ago. Now, cops and politicians want to solve all the problems from their desk. No, sorry, my freedom is not to be sold for their convenience. You want to catch a bad guy, you get a trained investigation team that follows people, that wires their house, that interrogates neighborhood, etc. Is it more work ? Yes. Is it more dangero…
So you want cost the taxpayer significantly with potentially months of unneeded work and expose cops to potentially more danger to ultimately arrive at the same result? How exactly is this better?
Signal, please stop asking for mandatory phone number to register and use Signal. This raises privacy concerns and negates all the end-to-end encryption goodness you're offering.
Identifying users is one thing, reading their message is another. People can still deny and not answer questions.
What matters is the messages being encrypted, identifying users is already being made possible through other means.
So yeah, using a phone number is good enough, in my view.
There is no perfect security, there is only "good enough" security.
Not to mention that phone numbers are more secure, in my view, than other sorts of digital communications, and are not always monitored in all countries.
Signal, please stop asking for mandatory phone number to register and use Signal. This raises privacy concerns and negates all the end-to-end encryption goodness you're offering.
Yes, this is why I am very suspicious of Signal as a front for the CIA / NSA. A phone number can reveal so much information about a person because many online and offline services now ask for it.
Earlier quoted context omitted.
What's the law in the UK, out of curiosity?
Even assuming we're just talking about traffic data rather than content of communications: https://www.legislation.gov.uk/ukpga/2016/25/section/87/enac... Ctrl+f for "generation"
Basically can the UK government compel you under the threat of criminal prosecution?
While I applaud Signal's response I expect this entire event (subpoena and response) will be provided as one of the exhibits to congress by the Department of Justice to justify their request that it be unlawful to provide such services. The DoJ will say, "See, here is this horrible crime we are investigating and because this company chose to make it impossible for law enforcement, with a warrant and a subpoena to get…
While I applaud Signal's response I expect this entire event (subpoena and response) will be provided as one of the exhibits to congress by the Department of Justice to justify their request that it be unlawful to provide such services. The DoJ will say, "See, here is this horrible crime we are investigating and because this company chose to make it impossible for law enforcement, with a warrant and a subpoena to get…
My favorite part of their response is that they gave the timestamps in unix milliseconds.
The snark of providing the timestamps as unredacted values was fabulous.
Earlier quoted context omitted.
I wonder how far they could go in compelling Signal to push a change that let more info leak for a specific user. I know there have been somewhat similar cases where companies were compelled to add new functionality, logs, etc, to capture info for a specific user.
I'm surprised the FBI has tried to get a custom keyboard into the Play Store yet, or asked Google to add a key logger to the stock one. Sure, the legality is blury at the moment , but it's just a matter of changing some laws and then that becomes legal.
Earlier quoted context omitted.
I wonder how far they could go in compelling Signal to push a change that let more info leak for a specific user. I know there have been somewhat similar cases where companies were compelled to add new functionality, logs, etc, to capture info for a specific user.
I'm surprised the FBI has tried to get a custom keyboard into the Play Store yet, or asked Google to add a key logger to the stock one. Sure, the legality is blury at the moment , but it's just a matter of changing some laws and then that becomes legal.