this post was submitted on 12 Sep 2026
408 points (96.2% liked)
Technology
88328 readers
3280 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Interesting they highlight Signal again as though this is a vulnerability.
If someone else has access to a linked device... that's you fucking up access controls.
I want a version of Signal that doesn't allow linked devices. Linking devices is a clear vulnerability.
Im going to go out on a limb here and suggest something that should be obvious - you don't have to link devices
But "Law enforcement" can do it by spoofing sms. I want one account, one device.
Signal does not use SMS.
The vulnerability they call out in the article is a phishing attack. A phishing attack requires the user's input. There is no defense, no security, no techniques or technology to prevent you from handing the key to your safe to someone else.
It's a vulnerability precisely because people always swarm to defend Signal in stories like this, as though using Signal means the authorities (or other bad actors) can't read your messages. Seems like every six months there's some story involving Signal users getting hacked, and every time there's a rush of wellacshuallys explaining why it wasn't really Signal's fault. (that last one is particularly egregious because I remember people defending it as "it wasn't Signal, it was their partner who they subcontracted and gave your personal data to", which is crazy levels of mental gymnastics.)
Security is more than just encryption. If you flag something up as "hey use this if you want to hide from the Government" and have a personal phone number attached to it, that's like a red rag to a bull.
(edit: LOL, it's hilarious how many people think they're making great rebuttals in the replies when all they're doing is proving my point. One child even flew directly into screaming at me. Signal fanbois are even worse than Apple supporters)
Nobody who understands the topic thinks this.
Signal exists to prevent the contents from being read off the wire and from having the capability of compelling Signal's parent company from turning over stored messages.
It doesn't exist to hand hold you so you don't get phished, or prevent you from running it on a vendor phone full of spyware. You're responsible for making sure your hardware is secure and that you're not socially engineered.
Yes, and articles like this are important so people who DON'T understand don't think this.
You don't think the tens of millions of people who use signal all understand that just because everyone says it's super secure, doesn't mean they can't be hacked or phished, right?
They even inform you in the app about spying vectors like keyboard apps...
https://support.signal.org/hc/en-us/articles/360055276112-Incognito-Keyboard
Yeah most people click through warnings like that lol
IT DOESN'T ADVERTISE ITSELF AS A SECURE PLATFORM!!!!!!
It says PRIVACY. If you are dancing ass naked inside your house but you have your windows open... guess what?
A lot of these types use 'perfect being the enemy of good' as their attack vector. If it's not private and anonymous why bother? If you can't cut out all big tech companies, if you can't stop buying any American goods, if you can't feed all the poor or house all the homeless, etc. It's an effective way to attack progression by making people believe they should just stop fighting, they'll never win. You nailed it, Signal is private, it doesn't claim to be anything else.
You just pointed something out there that I haven't really considered. But its also the difference between abolitionists and reformists too- namely, abolition should be the goal, but don't let that stop you from making reforms too.
A rabid fan of a message application? Just for trying to point out that if the police get your unlocked phone then they have compromised your messages?
Why are you lying about what security guarantees Signal say they offer?
https://support.signal.org/hc/en-us/articles/9932632052378-How-to-protect-yourself-on-Signal
https://support.signal.org/hc/en-us/articles/9932566320410-Staying-Safe-from-Phishing-Scams-and-Impersonation
Even your example of the Twilio hack is far less relevant now since they added transparency logs, which means it is much harder to impersonate you without detection even if the hacker can control the telco
https://support.signal.org/hc/en-us/articles/10223569377562-Automatic-Key-Verification