5
submitted 9 months ago by cm0002@lemmy.zip to c/privacy@programming.dev
all 16 comments
sorted by: hot top new old
[-] wildbus8979@sh.itjust.works 18 points 9 months ago* (last edited 9 months ago)

Kinda of a poor write up. I have my issues with this but signal doesn't really use phone numbers internally, it uses hashes of phone numbers. It's not as straight forward as this article makes it seem, and this is readily available information that the author could have found.

[-] gtr@programming.dev 6 points 9 months ago

Hashing doesn't really do anything because there are too few possible phone numbers. Easy to bruteforce. See the researchers who enumerated the WhatsApp users database recently via the internet...

[-] staircase@programming.dev 9 points 9 months ago* (last edited 9 months ago)

My vague memory is that Signal doesn't keep that information, so it couldn't be subpeona'd, indeed they've been asked for it before and declined to share.

BUT IT'S MOOT IF YOUR MESSAGES ARE VIEWED by sender or receiver ON ANDROID, WINDOWS OR IOS. Those operating systems can just view everything you type regardless.

[-] gtr@programming.dev 2 points 9 months ago

How does signal match your contacts based on their phone number then?

[-] ReversalHatchery@beehaw.org 2 points 9 months ago
[-] gtr@programming.dev 2 points 9 months ago

Oh but that's still better than I expected.

[-] staircase@programming.dev 1 points 9 months ago

Hence "vague memory". I don't know.

[-] Kolanaki@pawb.social 6 points 9 months ago

I would hope so. It's facilitating us talking; it kinda has to know who I am trying to talk to.

[-] onlinepersona@programming.dev 6 points 9 months ago

Should've known this was going to be an ad for SimpleX. They have a hard-on for anti-Signal content. It's nearly as laughable as GrapheneOS's hate for anything not GrapheneOS.

[-] gtr@programming.dev 2 points 9 months ago
[-] onlinepersona@programming.dev 1 points 9 months ago* (last edited 9 months ago)
[-] gtr@programming.dev 1 points 9 months ago

Sorry what?

[-] gtr@programming.dev 6 points 9 months ago

In addition to that, in most European countries you have to register with your ID in oder to get a mobile phone number. So its provably end-to-end related to your identity.

I prefer apps that require no phone number. Like Threema, SimpleX, Session, Status, XMPP, or Tox.

this post was submitted on 23 Nov 2025
5 points (61.9% liked)

Privacy

5091 readers
162 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago
MODERATORS