Signal says 1,900 users' phone numbers exposed by Twilio breach | TechCrunch
techcrunch.comAt least one user had their Signal number re-registered by an attacker.
You must log in or register to comment.
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 57 users / day
- 383 users / week
- 1.5K users / month
- 5.7K users / 6 months
- 1 subscriber
- 2.44K Posts
- 57.3K Comments
- Modlog
Just another reason why messengers like Signal and SimpleX that don’t require phone numbers or email addresses are much more private
This is probably a good time to remind everyone to set up the registration lock.
Am I missing something or is this setting not available on Android?
I found it. It’s in the Account settings, under pin settings.
This is old news though?Never mindThis post is a year old
Yes, exactlyMy bad, you meant the Lemmy post, didn’t notice that, now I get what is happeningYou can care about privacy, or you can ask a phone number during sign up. Those things are mutually exclusive.
Don’t use Signal you care about privacy.
You’re conflating privacy with anonymity. Signal is not anonymous, but it is private.
I can’t fathom why they insist on sticking with this. It’s so obviously a de-anonymization technique, which is completely at odds with the rest of their stated goals. I haven’t made a Signal account for exactly this reason.
Don’t let perfection be the enemy of good. All my friends and family use Signal, it was a multi-year effort to pull that off. Signal will roll out usernames faster than the tide will turn, so let’s take our wins and learn to be better.
Yhea.
I can almost exclusively chat with my social circle with signal now, been using it since 8-9 years.
I’ve tried xmpp, matrix and some other. Signal is the only one that stuck, it’s not perfect but it’s fucking fine from my perspective.
It’s abominable that Signal still requires a phone number.
How else are they going to track you?
No, seriously. Even if the messages are encrypted, the metadata including your account info and the account info of everyone you talk to are not. In a lot of these cases, they don’t have to have the actual contents of the messages to have a pretty clear picture of what you might be talking about!
With a phone number that’s almost certainly registered to your real identity, it makes it trivial to track what you as a person is doing even without breaking the encryption! An encrypted messenger that requires anything related to your real identity to get an account is security theatre.
For example: if you suddenly start messaging back and fourth with an account, and that account happens to have the same phone number as the one on the business card and website of an out of state abortion clinic worker, and your own phone number’s area code just so happens to fall in a state that banned abortions after Roe v Wade got trashed, it juuuust might imply a few things about you. They can’t definitively prove what the messages were, but if your state criminalizes any and all attempts to get an abortion anywhere, it’s probably enough to get a warrant against you.
What viable user-friendly (i.e. no account creation required) options are there? I just want my messages between friends and family to not be mined by greedy corporations.
They probably do it to prevents spam/abuse. It is supposed to be a better WhatsApp after all, not a completely federated software. So it gotta be somewhat user friendly.