Signal is not a privacy app really. It is a POC for an improved version of OTR with a lot of extra baggage.
-
-
Replying to @thegrugq
I mean, whether or not it's a "privacy app" depends on how it's used, no? It's a very private messaging app.
2 replies 0 retweets 1 like -
Also very visible that you're using it for anyone sniffing the backbone upstream. OTR at least works w/in other services.
1 reply 0 retweets 1 like -
I guess. But the more normies use Signal the less its visibility matters.
2 replies 0 retweets 2 likes -
https://www.jwz.org/blog/2017/03/signal-leaks-your-phone-number-to-everyone-in-your-contacts/ … there are other privacy issues.
2 replies 4 retweets 5 likes -
This blog post is simply wrong. Signal does not do this. Happy to walk you through the code if you disagree.
2 replies 4 retweets 26 likes -
Replying to @signalapp @whispersystems and
happy to read the code, which repo and files? What is the server config?
1 reply 0 retweets 5 likes -
Server: https://github.com/WhisperSystems/signal-server … Clients: https://github.com/WhisperSystems/signal-android …https://github.com/WhisperSystems/signal-ios …
3 replies 1 retweet 11 likes -
Replying to @signalapp @whispersystems and
I'm familiar with them, so what's the server config, and which part of Android code base?
2 replies 0 retweets 0 likes -
Here's the reg flow: https://github.com/WhisperSystems/Signal-Android/blob/master/src/org/thoughtcrime/securesms/service/RegistrationService.java … At no point does Alice send a msg w/ her # to all her contacts.
2 replies 2 retweets 10 likes
The receive message flow: https://github.com/WhisperSystems/Signal-Android/blob/master/src/org/thoughtcrime/securesms/jobs/PushDecryptJob.java … No msg type for receiving a # and creating a contact card.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.