• 205 Posts
  • 1.6K Comments
Joined 7 years ago
cake
Cake day: April 17th, 2019

help-circle

  • Dessalines@lemmy.mltoPrivacy@lemmy.mlSignal in 2026?
    link
    fedilink
    arrow-up
    1
    ·
    19 minutes ago

    People are not as stupid as these large centralized sites like signal keep telling you they are. Ppl figured out how to make accounts on different services, forums, and platforms since the internet began. It is no more difficult to make a matrix account, or install simpleX than it is anything else. My partner and I figured out simplex within 10 minutes.


  • Dessalines@lemmy.mltoPrivacy@lemmy.mlSignal in 2026?
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    22 minutes ago

    none of this information ever leaves your client device, so

    The phone number you gave to signal to sign up never left your device? Do you truly believe that?

    When you send a message through signal, do you actually think “nothing” left your device?


  • These are all “trust me bro” claims.

    Give me ssh access to their server so I can verify that this “sealed sender” is working correctly and not using the info you already gave them. We would demand this transparency of open source messengers, so why not signal?



  • Signal stores, and has access to, no message metadata.

    Phone numbers are the most important metadata you can give them, far more important than message content. It means your real identity / name and address. With phone numbers you can build social networking graphs: who talked to who, and when.

    To be convinced of this, take a look at the client source code, and compile the app yourself.

    Client source code is irrelevant here. Signal is a centralized service, you can’t verify what their US-based server is actually running (although they did go a full year without publishing any server updates at one point, until they received a lot of backlash for it).

    None of this information ever leaves your phone without being encrypted or otherwise masked.

    You gave them your phone number / real identity when you signed up. The most important piece of info they could possibly give them, you already did.



  • Dessalines@lemmy.mltoPrivacy@lemmy.mlSignal in 2026?
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    5 hours ago

    Signal clients implement the Pond protocol. As a result, Signals servers know who a message is for (obviously, how else do you get the message) but cannot know who it is FROM.

    Give me ssh access to signal’s centralized US-hosted server so I can verify this (IE that their centralized DB doesn’t store).

    Otherwise this is a “trust me bro” claim, considering they have the phone numbers of everyone who signed up, and are the routing service for the messages you send.