this post was submitted on 20 Feb 2024
642 points (99.2% liked)
Privacy
32177 readers
390 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Indeed, which makes their headline a bit misleading. Giving Signal your phone number is not keeping it private.
I thought peoples big problem with it was not wanting to give others their number to use signal? Like I meet Joe Blog online and don't want to give him my real number to chat.
Less people worried that signal had their number?
Seems the second group is a vocal minority. This feature helps the first group, but doesn't help the second group.
According to Signal, the first group is the larger group and this helps the most users of Signal.
Could it be better? Sure. This is still a good step in terms of privacy, even though it doesn't really improve anonymity.
Its important to not let perfect be the enemy of good.
Personally, I care about the phone number requirement not because I don't want to reveal it to Signal servers, but because it limits access to Signal for people in countries that block their SMS service - registration messages just don't arrive
It's specific to signal? Like they want to block people registering or what's up with that SMS block?
Not specific to Signal. I believe he was referring to places where Twilio doesn't serve, for example because of sanctions.
Putting a SIM card in a phone exposes it to enormous surface area of attack. People have been asking to register with anonymous emails instead of a phone number, like Wire has had for years
Do you need the SIM card inside the phone after registration?
Does it matter? At that point your phone is owned by Pegasus et all with zero click vulns
The issue is that giving your phone number to Signal Messenger LLC is giving it to others, and therefore not keeping it private in the usual sense of the word.
Some people may be unconcerned about a corporation knowing their number vs. their contacts knowing their number, but that doesn't diminish the misleading aspect of this headline.
Wrong, it still keeps it private but not anonymous. It's not the same concept and for most thread models knowing that you use Signal is not really an issue, especially since with this feature no one can check if you have one if you don't give them your username unless they have access to Signal servers in which case they still have nothing except the knowledge that you have an account.
They do a lot of work to keep your phone number private, or at least any data that is tied to it. This username upgrade is solely for someone to communicate over Signal without needing to hand over your phone number.
For example, you can now be in group chats with internet strangers by just giving them your username.
On top of that, once MLS is adopted, you can communicate with other messengers as well.
What is MLS?