469
Even State Department-funded Human Rights Watch admits that authorities combine legal and illegal methods to obtain convictions: https://text.hrw.org/report/2018/01/09/dark-side/secret-origins-evidence-us-criminal-cases
Combining dragnet surveillance with device hacking is intended in the design of both tools. Hence, State Department-funded Signal dupes you into handing over your identity as part of the population-centric mapping. In custody, your phone will be hacked when it is taken away if it's important.
https://xcancel.com/hannahcrileyy/status/2034273723667161480#m
What evidence do you have that Signal collects anything? Traffic logs from the app or something?
Signal doesn't need to, you need to trust the whole chain. You'll need to trust AWS, you need to trust Intel SGX, etc
At that point you can rely on nothing but Tor or I2P
Nothing else hides metadata better than Signal, without involving large networks of independent nodes that participate in Sybil resistant routing. The only thing that gets close is threshold schemes where you still need multiple independent entities running servers.
The phrase "E2E encryption" definitionally means it applies when you don't trust whole chain.
It uses a phone number.
Phone numbers havent been required for at least like a year or so
That isn't true. You still need a phone number to sign up.
Hm now I wonder what to do about that, as they have had my number for a while now.
Do they let you sign up purely with username and password? Or do they make you use insecure email?
You can check if a number is registered with Signal just by having Signal and starting a chat with that number
Even if the number is set as hidden in settings?
They changed that. You can make yourself undiscoverable by just the number now
This is as shady as Telegram to me tbqh