Live data from Hacker News

Multiple Russia-aligned threat actors actively targeting Signal Messenger

cloud.google.com

81–90 of 329 posts

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#82

Earlier quoted context omitted.

Just explain what end to end encryption means. People are starting to get it and don’t want companies able to read their messages.

Isn’t WhatsApp end-to-end encrypted?

Yes it is, they actually use the signal protocol,[0] but they collect metadata which Signal supposedly doesn't (you can't really know)

[0] https://en.wikipedia.org/wiki/Signal_Protocol#:~:text=Severa...

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#83
post #72

Earlier quoted context omitted.

Obligatory request to provide a source to backup some serious claims?

If you're a signal user and didn't know about this already, that should tell you everything you need to know about signal. See https://community.signalusers.org/t/proper-secure-value-secu... Then read the first line of their terms and privacy policy page which says: "Signal is designed to never collect or store any sensitive information." ( https://signal.org/legal/ ) Signal loves to brag about the times when the gov…

Also signals spam folder isn't open source on server side. They literally have code that reads your messages and checks if spam or not and you cant see what it does or how it's written.

Couple this with signal being the preferred messaging app for 5 eyes countries as advised by their 3 letter agencies and well if you think those agencies are going to be advising a comms form they can't track, trace or read you obviously don't understand what they do.

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#84
post #41

Earlier quoted context omitted.

Nobody cares about this unless they deal drugs or something. What some people care about is not giving all their private conversations to masculine energy zuck - but don't expect any major wins.

Awful shortsighted and uninformed viewpoint that has been beaten into the ground ad nauseum. Read a couple books. Privacy is a precondition to democracy.

What books would you recommend, that proof that connection?

"Privacy is a precondition to democracy"

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#86
post #9

It is not plainly stated in the article, but as far as I understand, the first step of one of the attacks is to take the smartphone off a dead soldier’s body.

Soldiers are not allowed to carry a cell phone.

Clearly, some folks didn't get the memo.

https://www.cbc.ca/news/world/russia-troops-cellphone-ukrain...

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#87
post #73

Earlier quoted context omitted.

Can you elaborate? I'm semi-familiar with the Signal protocol but I'm not sure what you are referring to here.

See https://community.signalusers.org/t/proper-secure-value-secu... Then read the first line of their terms and privacy policy page which says: "Signal is designed to never collect or store any sensitive information." ( https://signal.org/legal/ )

I was going to discount most of this. It appears this link is missing or private now. What did it say?

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#89

Earlier quoted context omitted.

See https://community.signalusers.org/t/proper-secure-value-secu... Then read the first line of their terms and privacy policy page which says: "Signal is designed to never collect or store any sensitive information." ( https://signal.org/legal/ )

I was going to discount most of this. It appears this link is missing or private now. What did it say?

fixed the link. Just to be safe, here's an archive of the page: https://web.archive.org/web/20210109010728/https://community...

Re: Multiple Russia-aligned threat actors actively targeting Signal Messenger

#90
post #72

Earlier quoted context omitted.

Obligatory request to provide a source to backup some serious claims?

If you're a signal user and didn't know about this already, that should tell you everything you need to know about signal. See https://community.signalusers.org/t/proper-secure-value-secu... Then read the first line of their terms and privacy policy page which says: "Signal is designed to never collect or store any sensitive information." ( https://signal.org/legal/ ) Signal loves to brag about the times when the gov…

I see a link to a forum where an anonymous participant says

“Since a recent version of Signal data of all Signal users is uploaded to Signal’s servers. This includes your profile name and photo, and a list of all your Signal-contacts.”

They then link to a Signal blog (2019) explaining technical measures they were testing to provide verifiably tamperproof remote storage.

https://signal.org/blog/secure-value-recovery/

I’m not equipped to assess the cryptographic integrity of their claims, but 1) it sounds like you’re saying that they deployed this technology at scale, and 2) do you have a basis to suggest it’s “not-very-secure or likely backdoored,” in response to their apparently thoughtful and transparent engineering to ensure otherwise?

Post reply on HN