cross-posted from : https://lemmy.zip/post/71321898
Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance
Signal does all that already
signal has a closed source server that can’t be audited.
https://github.com/signalapp/Signal-Server
That changed
what does it need a database for?
simplex is literally a message broker. no data remains on the server.
Signal doesn’t keep messages either. Do you know what they can serve FBI every time they ask? Nothing but number at first seen date. They don’t have your metadata.
then why does it have a database?
Here’s what he documentation says;
… Or wait…
Oops, that was from Simplex, who has a database, that didn’t come from Signal’s documentation
https://github.com/simplex-chat/simplexmq/blob/master/protocol/overview-tjr.md
cherry picking.
what this means is don’t blindly trust a random public router.
if you host your own router, you can set the threshold to hours or seconds. you can also ensure that your router isn’t maliciously storing records.
simplex uses an in-memory queue to store messages for delivery. if the server was extracted for legal measures, this means the messages are erased and difficult if not impossible to collect.
for signal, they are written to disk. this means there is evidence of communications between users. even if you host your own signal server, it will be there.
Liar
You’re claiming Signal does these things when it doesn’t, and claim Simplex doesn’t do what’s in the documentation
Because sometimes, people are not online 24/7 and messages still need to reach them when possible.