this post was submitted on 23 Nov 2025
5 points (63.2% liked)

Privacy

3196 readers
278 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
top 16 comments
sorted by: hot top controversial new old
[–] wildbus8979@sh.itjust.works 18 points 1 month ago* (last edited 1 month ago) (1 children)

Kinda of a poor write up. I have my issues with this but signal doesn't really use phone numbers internally, it uses hashes of phone numbers. It's not as straight forward as this article makes it seem, and this is readily available information that the author could have found.

[–] gtr@programming.dev 6 points 1 month ago (1 children)

Hashing doesn't really do anything because there are too few possible phone numbers. Easy to bruteforce. See the researchers who enumerated the WhatsApp users database recently via the internet...

[–] IceFoxX@lemmy.world 1 points 1 month ago* (last edited 1 month ago)

Hold up. They also have profile pictures and other stuff. So Meta offered the option to create a global phone book, but also to create a phone book of children worldwide + a timeline of profile pictures. Meta's statement was that it wasn't a big deal because it was public data... So Meta's pedos dream phone book is something else entirely.

[–] staircase@programming.dev 8 points 1 month ago* (last edited 1 month ago) (1 children)

My vague memory is that Signal doesn't keep that information, so it couldn't be subpeona'd, indeed they've been asked for it before and declined to share.

BUT IT'S MOOT IF YOUR MESSAGES ARE VIEWED by sender or receiver ON ANDROID, WINDOWS OR IOS. Those operating systems can just view everything you type regardless.

[–] gtr@programming.dev 2 points 1 month ago (2 children)

How does signal match your contacts based on their phone number then?

[–] ReversalHatchery@beehaw.org 2 points 1 month ago (1 children)
[–] gtr@programming.dev 2 points 1 month ago

Oh but that's still better than I expected.

[–] staircase@programming.dev 1 points 1 month ago

Hence "vague memory". I don't know.

[–] gtr@programming.dev 6 points 1 month ago (1 children)

In addition to that, in most European countries you have to register with your ID in oder to get a mobile phone number. So its provably end-to-end related to your identity.

I prefer apps that require no phone number. Like Threema, SimpleX, Session, Status, XMPP, or Tox.

[–] IceFoxX@lemmy.world 3 points 1 month ago

The main advantage of Signal was the SMS integration, which meant you no longer had to use the SMS app itself. In addition, SMS messages were displayed like a chat. That's why it needed to be linked to your cell phone number, but since they're no longer allowed to offer that anyway, they could have done a clean sweep of existing accounts and adapted the entire login process.

[–] Kolanaki@pawb.social 6 points 1 month ago

I would hope so. It's facilitating us talking; it kinda has to know who I am trying to talk to.

[–] onlinepersona@programming.dev 6 points 1 month ago (1 children)

Should've known this was going to be an ad for SimpleX. They have a hard-on for anti-Signal content. It's nearly as laughable as GrapheneOS's hate for anything not GrapheneOS.

[–] gtr@programming.dev 2 points 1 month ago (1 children)
[–] onlinepersona@programming.dev 1 points 1 month ago* (last edited 1 month ago) (1 children)
[–] gtr@programming.dev 1 points 1 month ago

Sorry what?

[–] IceFoxX@lemmy.world 1 points 1 month ago

Well use some p2p messenger with tox protocoll