254
Signal downplays encryption key flaw, fixes it after X drama
(www.bleepingcomputer.com)
This is a most excellent place for technology news and articles.
It's better now, but for years and years all they used for contact discovery was simple hashing.. problem is the dataset is very small, and it was easy to generate a rainbow table of all the phone number hashes in a matter of hours. Then anyone with access to the hosts (either hackers, or the US state via AWS collaboration) had access to the entire social graph.
Yeah the way I remember it, they put a lot of effort into masking that social graph. That was a while back too, not recent.
What I'm saying though is that for the longest time they didn't, and when they changed the technique they hardly acknowledge that it was a problem in the past and that essentially every users social graph had been compromised for years.
Did it get leaked or something?