• Ulrich@feddit.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    21 hours ago

    And what are the implications of that control? It doesn’t mean they can access anything on it. Especially not data that doesn’t exist.

    • poVoq@slrpnk.net
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 hours ago

      They have live access to all of the metadata and can easily correlate that with phone numbers that Signal stores and shares on request of governments. Just because Signal claims they don’t store anything doesn’t mean that the ones that 100% run all the servers Signal uses don’t access and store anything. You are being extremely naive if you believe Signals BS marketing.

      • Ulrich@feddit.org
        link
        fedilink
        English
        arrow-up
        0
        ·
        21 hours ago

        They have live access to all of the metadata and can easily correlate that with phone numbers

        I’d love to see the evidence you have for this.

        You are being extremely naive if you believe Signals BS marketing.

        I don’t believe in marketing. I believe in open source code, security audits, and the entirety of the privacy and security community.

        • poVoq@slrpnk.net
          link
          fedilink
          English
          arrow-up
          0
          ·
          21 hours ago

          Look, if you run the server you have access to metadata of clients connecting to it. That is networking 101. And that Signal shares phone numbers and connection timestamps is well established by court documents.

          The security audits are of the code and encryption algorithm, not the infrastructure.

          • Ulrich@feddit.org
            link
            fedilink
            English
            arrow-up
            0
            ·
            20 hours ago

            So you don’t have any evidence.

            And that Signal shares phone numbers and connection timestamps is well established by court documents

            They do not share phone numbers. Phone numbers are the identifier, meaning if anyone wants the timestamps, they need to have it already.

            The only timestamps shared are when they signed up and when they last connected. This is well established by court documents that Signal themselves share publicly.

              • Ulrich@feddit.org
                link
                fedilink
                English
                arrow-up
                0
                ·
                20 hours ago

                I can observe that water is wet. I cannot observe that the NSA is collecting mountains of metadata from Signal servers.