92
submitted 1 month ago by 101@feddit.org to c/technology@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] ikidd@lemmy.world 27 points 1 month ago

Can someone explain to me how them having my phone number and being able to find new contacts with their phone numbers doesn't lead to a whole association chain problem that can be used to repress dissension in countries inclined to do that? I have a hard time believing that the phone numbers aren't available to state actors. Requiring a phone to sign up seems fishy as fuck.

Matrix doesn't need this info and seems to work fine.

[-] trailee@sh.itjust.works 12 points 1 month ago

They don’t store anything about your association with other numbers; that stays on your devices. Your phone number is used as your identifier for account creation and originally for finding other people to talk with, but the only data Signal keeps associated with your number are registration timestamp and last connection timestamp. You can see that by reading the redacted subpoenas and responses that they publish.

They have recently introduced usernames so that you can avoid having to share your number to communicate with someone else.

I don’t have a good citation for this, but I believe the phone number registration requirement will remain indefinitely, likely to cut down on spam and bots. But there’s a difference between privacy and anonymity - I’m looking for privacy in my communications, not anonymity from my friends. State actors can know that you use it but not what you’re saying or to whom (unless, say, the NSA is specifically targeting you, but that compromise will be of your device as a whole rather than breaking Signal or getting data from them).

[-] sugar_in_your_tea@sh.itjust.works 2 points 1 month ago

Exactly:

  1. sign up w/ phone number
  2. disable phone number for discovery and create a username
  3. change username as often as you want, while keeping your contacts
[-] Wildly_Utilize@infosec.pub 2 points 1 month ago

+1

Have you tried simplex?

[-] EngineerGaming@feddit.nl 1 points 1 month ago

Yeah, if I am not mistaken, this has happened in Iran - the registration confirmation messages just wouldn't arrive.

this post was submitted on 23 Sep 2024
92 points (94.2% liked)

Technology

59300 readers
771 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS