Live data from Hacker News

Multiple Russia-aligned threat actors actively targeting Signal Messenger

cloud.google.com

31–40 of 329 posts

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#31

I'd love to have more of my socializing happening on Signal. Anyone got a good way to convince the non-paranoid to use it?

"Sorry, I only use Signal" has worked nearly a decade for me

Virtue Signalling!

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#32

I'd love to have more of my socializing happening on Signal. Anyone got a good way to convince the non-paranoid to use it?

Just explain what end to end encryption means. People are starting to get it and don’t want companies able to read their messages.

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#33

So a few days ago Elon Musk blocked all links to Signal from the X platform and now this... Could be a coincidence but the timing sure is sus.

Not really, the domain block was reportedly due to increased spam activity from that domain and performed automatically, so it would follow that a write up would come a few days later. That is if they are related, which is not a given.

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#34

I'd love to have more of my socializing happening on Signal. Anyone got a good way to convince the non-paranoid to use it?

Group stories are great fun and a feature I seriously miss on Whatsapp. They work well from meme chats to family groups.

There being a killer feature that Whatsapp users are missing out on won't convince everyone but it sure makes me feel less like a nerd when encouraging the switch to Signal.

I find it quite funny that such an obvious feature likely hasn't been added to Whatsapp yet because Meta thinks Instagram is for stories. That's pure speculation on my part though

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#36

I'd love to have more of my socializing happening on Signal. Anyone got a good way to convince the non-paranoid to use it?

Just explain what end to end encryption means. People are starting to get it and don’t want companies able to read their messages.

Isn’t WhatsApp end-to-end encrypted?

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#40
Signal (and basically any app) with a linked devices workflow has been risky for awhile now. I touched on this last year (https://news.ycombinator.com/context?id=40303736) when Telegram was trash talking Signal -- and its implementation of linked devices has been problematic for a long time: https://eprint.iacr.org/2021/626.pdf.

I'm only surprised it took this long for an in-the-wild attack to appear in open literature.

It certainly doesn't help that signal themselves have discounted this attack (quoted from the iacr eprint paper):

    "We disclosed our findings to the Signal organization on October 20, 2020, and received an answer on October 28, 2020. In summary, they state that they do not treat a compromise of long-term secrets as part of their adversarial model"
Post reply on HN