this post was submitted on 28 Aug 2024
531 points (96.5% liked)
Privacy
32383 readers
198 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The phone number is a unique identifier for your account. When you send a message to another user on Signal, that message goes to the server, and then gets routed to the other party. The server therefore has to know which parties talk to each other. Let me know if you have trouble understanding this and need it explained in simpler terms.
Youre right, thats how it works in almost all messaging apps. But signal implemented sealed sender specifically to counter this.
You can read more about it here: https://signal.org/blog/sealed-sender/
I encourage you to read the first paragraph, which is important in the context of our conversation.
I’m talking about the information the server has. The encrypted envelope has nothing to do with that. Your register with the server using your phone number, that’s a unique identifier for your account. When you send messages to other people via the server it knows what accounts you’re talking to and what their phone numbers are. The first paragraph amounts to nothing more than trust me bro because the only people who know what the Signal server actually does are the people operating it.
Seriously, what are you talking about? The vast majority of people don't want anonymity. Obviously Signal isn't cut out for that! The fact is, most people don't care about anonymity.
And what metadata can you harvest exactly from a UNIX timestamp and phone number? Signal can tell who is communicating to who, but they cannot read your messages.
Most people, even in this very thread, clearly don't understand the implications of phone number harvesting. Also do give citations for your bombastic claim that most people don't want anonymity.
The graph of who communicates with whom is precisely the problem. The government can easily correlate that data with all the other data they have on people, and then if somebody is identified as a person of interest it becomes easy to find other people who associate with them. So, here you just proved my point by showing that you yourself don't understand the implications of metadata harvesting.
This is entirely dependent on the situation. Privacy is not a black or white thing where you're completely private or not private at all. Everyone lives some part of their life publicly. I don't have data on this unfortunately, but typically where I live, people share phone numbers to people they personally know.
This is not within the vast majority of most peoples threat model.
I never suggested privacy was black and white. What I actually said was that a lot of people aren't making an informed choice. And whenever these threads come up, people pile on to dismiss legitimate problems with the way Signal works which makes it harder for people to make informed choices by spreading noise and misinformation. This very thread is full of wrong claims and dismissals.
Majority of people don't even need Signal because they're not talking about anything anybody cares about. At that point you can use whatever messenger that's convenient and your circle of friends uses. However, people shove Signal down other people's throat claiming that it's a privacy focused app which it demonstrably is not.
This is about Signal having the phone numbers. I don't think anybody "personally knows" Signal..
You are routing your traffic over the public internet. Nothing is secure at all. That's why we implement strong cryptography
Yes, that's why we don't leak personal data. You're finally starting to get it!
Anyone who has worked with centralized databases can tell you how useless that is. With message recipients and timestamps, its trivial to find the real sender.