cross-posted from : https://lemmy.zip/post/71321898

Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance

  • GreenKnight23@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    22 hours ago

    what company doesn’t want to grow or maintain services? they host the primary servers that everyone uses, that costs money.

    you could host your own though. can you do that with signal?

      • GreenKnight23@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        22 hours ago

        as I pointed out in your other comment. signal uses a database, fails to explain why a database is required, and doesn’t even make a mention of it in their technical information.

        why use a database at all? that just introduces more attack surface area and complexity for attackers to leverage.

        • Natanael@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          19 hours ago

          Yeah precisely you didn’t check what it’s for. It doesn’t hold conversation data or even metadata.

            • Natanael@infosec.pub
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              edit-2
              15 hours ago

              WHAT DO YOU THINK IT’S USED FOR

              they have 45 day store-and-forward of encrypted attachments, and the handle registration thing, and that’s it

              Do you think they would want to go to federal jail for lying to federal agents when they insist they have no metadata about you?

              Messages persist in memory or in a database until they cross a threshold of time, typically on the order of days.

              https://github.com/simplex-chat/simplexmq/blob/master/protocol/overview-tjr.md

              Hypocrite

              • GreenKnight23@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                1
                ·
                14 hours ago

                I’m about to block you because you’re just spamming the same argument in two different threads.

                simplex has a more secure and robust architecture when compared to signal. simplex router can literally run on a raspberry pi zero with 2gb of storage.

                nothing is written to storage for simplex unless you configure it otherwise.

                the defaults for signal selfhosting promotes convenience over security and does not appropriately protect admins from search and seizures.

                signal is good, if all you want is to share memes with your friends, but if you want to build a network of trusted individuals for purposes that are actively targeted by corrupt governments, simplex wins hands down.