←back to thread

Signal Secure Backups

(signal.org)
988 points keyboardJones | 1 comments | 08 Sep 25 16:43 UTC | HN request time: 0s | source
Show context
declan_roberts ◴[08 Sep 25 18:23 UTC] No.45171904[source]▶
Am I still required to add a phone number to use signal? What's the point of that. Every single person in the USA (and probably world) is quickly and trivially de-anonymized with a phone number.
replies(3): >>45171978 #>>45172313 #>>45174174 #
throawayonthe ◴[08 Sep 25 18:29 UTC] No.45171978[source]▶
nobody has access to your phone number from your account, and when subpoenad they are unable to provide it:https://signal.org/bigbrother/

'the point' is spam protection, alas

replies(1): >>45175146 #
1. autoexec ◴[08 Sep 25 22:50 UTC] No.45175146[source]▶
That article is out of date. It says things like "Signal still knows nothing about you", but Signal collects every user's name, phone number, photo, and a list of their contacts and permanently stores that data in the cloud.

That data is only protected by a pin (which can be brute forced) and SGX which has a history of being leaky. Researchers even demonstrated that data could be collected from Signal at one point. There are very likely side channel attacks that would allow Signal, or the government to collect the data stored in the cloud.

https://web.archive.org/web/20250117232443/https://www.vice....

https://web.archive.org/web/20230519115856/https://community...