Earlier quoted context omitted.
[flagged]
[flagged]
boo
Multiple Russia-aligned threat actors actively targeting Signal Messenger
191–200 of 329 posts
Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#192Can't view the article, as I am an evil Tor user.
Me too, but I was able to access the article through the Internet Archive:
https://web.archive.org/web/20250219202428/https://cloud.goo...
Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#193"Russia-aligned threat actors" has a whole new meaning this last week.
[flagged]
Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#194There are many voices which try to tell you that signal is compromised. Notice that all of those voices have less open-source-ness than Signal in virtually all cases. Signal is doing its best to be a web scale company and also defend human rights. Individual dignity matters. This is not a simple conversation.
Also, it's a tricky environment of disinformation generally, and in particular for anything valuable like Signal. If Signal is secure, attackers on privacy would want people to believe Signal is compromised and to use something else. If it's not, then they would want people to believe Signal is secure. I think the solution is to completely ignore any potential disinfo source, especially random people on social media…
I would also read it from another perspective. Attackers, especially at the level of nation states, will always try to get as many avenues for achieving their goals as possible.
If you have compromised a service, it would be in your interest to make it more popular (assuming you think you are the only one in possession of it).
If you cannot, you don't give up; you just go back to the drawing board (https://xkcd.com/538/). Maybe I don't need to break Signal if I can just rely on phishing or scare tactics to get what I want.
Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#195You can check for unexpected linked devices in the settings menu.
Great idea, I'll send you a QR code...
Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#196Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#197Is this why twitter has been blocking signal.me links? https://news.ycombinator.com/item?id=43076710
Unrelated most likely, signal.me is a legitimate domain used by Signal. Doubt twitter is so on top of Threat Analysis when they fumbled their own redirects from twitter.com to x.com for a while.
Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#198Earlier quoted context omitted.
I helped an especially non-technical user install Signal and they didn't need my help at all. They were using it in a minute - download from the app store, transcribe a code from a text message, and you're in - and it worked just like legacy text and phone. I'd tell them that - just download it and you'll be texting me in a minute, and now nobody is tracking everyone you talk to.
To be clear, someone will/can track WHO you talk to. Right?
That kind of meta data is not stored by signal as far as I know.
But yes, data stream between two end points can be linked to communicating with each other.
Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#199Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger
#200Earlier quoted context omitted.
Isn’t WhatsApp end-to-end encrypted?
I thought they recorded the metadata - who talks to who and when. (For the uninitiated, that is as valuable or more valuable than the message contents.)
you also send them your contacts in plaintext so you can find who's also on WhatsApp; signal doesn't