←back to thread

It looks like Signal isn't as open source as you thought it was anymore

(www.androidpolice.com)
242 points raybb | 5 comments | 06 Apr 21 18:04 UTC | HN request time: 2.482s | source
Show context
ndiscussion ◴[06 Apr 21 18:42 UTC] No.26715675[source]▶
It's been like this for a while, and the project owner's attitude is pretty negative overall. I do use signal daily, but I believe it's likely compromised ala lavabit.
replies(4): >>26715714 #>>26715934 #>>26716233 #>>26718058 #
1. gruez ◴[06 Apr 21 19:03 UTC] No.26715934[source]▶
I thought they were never compromised? They shut down rather than comply with the order

>The service suspended its operations on August 8, 2013 after the U.S. Federal Government ordered it to turn over its Secure Sockets Layer (SSL) private keys, in order to allow the government to spy on Edward Snowden's email

replies(1): >>26716083 #
2. ndiscussion ◴[06 Apr 21 19:12 UTC] No.26716083[source]▶
Lavabit was never compromised, I'm saying that Signal may have been compromised by the feds, instead of choosing to shut down. Feds may have learned their lesson and not provided an option this time.
replies(1): >>26717157 #
3. notjtrig ◴[06 Apr 21 20:44 UTC] No.26717157[source]▶
The chance that a small nonprofit with so much traffic is not leaking/providing data to the feds is astronomically slim imho, there are so many actors who would love to there hands on it. Maybe it thwarts some inteligance services but not those with unlimited resources.
replies(1): >>26717298 #
4. 2OEH8eoCRo0 ◴[06 Apr 21 20:57 UTC] No.26717298{3}[source]▶
Based on what information would you draw such a conclusion?
replies(1): >>26869945 #
5. notjtrig ◴[20 Apr 21 02:02 UTC] No.26869945{4}[source]▶
I would point you towards Stuxnet and take a look at how sofisticated a state level attack can be and the fact that today Iran still can not keep us (America/Israel) out of it's centrifuges. Everything you type online is being stored by multiple actors, to think they can't access a small company with limited resources is wishful thinking. If no one in Signal's 180 employees is working for the feds I would be embarrassed to be an American.