• helenslunch@feddit.nl
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    2 months ago

    It’s bad for privacy no matter how you sell it.

    I mean it’s not ideal but as long as it’s not tied to literally any other information, the way Signal does it, it’s “fine”, and certainly not “bad” and especially not “pure bullshit”.

    So if a government agency comes along saying “Hey, we know this account sent this message and you have to give us everything you have about this account,”

    They have done this several times, they give them nothing because they have nothing.

    • Ganbat@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      3
      ·
      edit-2
      2 months ago

      Says right there in the subpoena “You are required to provide all information tied to the following phone numbers.” This means that the phone number requirement has already created a leak of private information in this instance, Signal simply couldn’t add more to it.

      Additionally, that was posted in 2021. Since then, Signal has introduced usernames to “keep your phone number private.” Good for your average Joe Blow, but should another subpoena be submitted, now stating “You are required to provide all information tied to the following usernames,” this time they will have something to give, being the user’s phone number, which can then be used to tie any use of Signal they already have proof of back to the individual.

      Yeah, it’s great that they don’t log what you send, but that doesn’t help if they get proof in any other way. The fact is, because of the phone number requirement, anything you ever send on Signal can easily be tied back to you should it get out, and that subpoena alone is proof that it does.

      • helenslunch@feddit.nl
        link
        fedilink
        English
        arrow-up
        11
        arrow-down
        2
        ·
        edit-2
        2 months ago

        This means that the phone number requirement has already created a leak of private information

        What information? The gov already had the phone number. They needed it to make the request.

        Additionally, that was posted in 2021.

        Here’s a more recent one.. Matter of fact, here’s a full list of all of them. Notice the lack of any usernames provided.

        Also note that a bunch of the numbers they requested weren’t even registered with Signal, so the gov didn’t even know if they were using the app and were just throwing shit at the wall and seeing what sticks.

        You are required to provide all information tied to the following usernames

        They can’t respond to requests for usernames because they don’t know any of them. From Signal: “Once again, Signal doesn’t have access to your messages; your calls; your chat list; your files and attachments; your stories; your groups; your contacts; your stickers; your profile name or avatar; your reactions; or even the animated GIFs you search for – and it’s impossible to turn over any data that we never had access to in the first place.”

        What else ya got?

        but that doesn’t help if they get proof in any other way.

        If they’re getting evidence outside of Signal, that’s outside the scope of this discussion.

        because of the phone number requirement, anything you ever send on Signal can easily be tied back to you should it get out

        …no. It can’t.

        that subpoena alone is proof that it does.

        It’s proof that it doesn’t.