#Signal #Lifehack. When you register as new user, Signal asks you to provide "a" phone number where it can send a confirmation code to finalise the setup.
Know that it asks for "a" phone number that can receive messages. It doesn't have to be YOUR phone number. This is not a new feature, it has always been like that. I registered my Signal account using the phone number of a prepaid SIM in a cheap burner phone. I have never used that number since.
The only thing Signal stores about you is
- When did you register your account (UNIX timestamp)
- When was the last time your account contacted a Signal server (UNIX Timestamp)
That's it. That's all Signal can produce about you when they are forced to by authorities. There is no history, no call log, no data beyond that.
Here you can see a subpoena asking for detailed information and the reply that Signal sent back: https://signal.org/bigbrother/cd-california-grand-jury/
@jwildeboer : unfortunately, most people believe that they have nothing to hide.
@ErikvanStraten @jwildeboer My standard reply to them is 'so why do you have frosted glass in your bathroom window'?
@RosePuckey @ErikvanStraten @jwildeboer Fun fact: There's a hotel in Dornbirn, Austria that doesn't. Yes, I can provide picture proof on request. No, I won't be staying there ever again.
@farbenstau @ErikvanStraten @jwildeboer It must be for those who really have nothing to hide.
@RosePuckey and @farbenstau : as a security guy I was taught (it's one approach) to ask "what is the risk" (and for whom).
An example: most people do not understand why using WhatsApp poses a risk - not just to themselves.
Messages are E2EE (End to End Encrypted), right?
Yes and no. It's not E2EE because the actual "end" is the person writing or reading a message. Most people are very bad at encrypting and decrypting bunches of bytes (in particular when asymmetric cryptography is involved).
Malware made by governments (ChatControl) or spyware makers may have access. Messages may be backed up to "the cloud" without encryption. The current or the next update of the WhatsApp app ir the OS on your phone (or *one* of the phones used) may trigger on specific keywords and send copies of messages to the NSA. People may forward your messages you don't like.
Apart from that, WhatsApp copies all of your contacts and sends them to Meta. Knowing who knows who is extremely valuable information. I don't use WhatsApp myself, but Meta does not care. Quite likely I'm in the address book of at least one person who uses WhatsApp.
It could be devastating for some people if such information falls into the wrong hands. In particular if you live in some third world country without basic human rights (such as the USA).
OTOH I don't believe it to be a big risk for me if anyone sees me naked (it IS for them though ).
Seriously, I believe that we (all people) have become way too prudish. Everybody has a body.
Young girls, but boys too, are lured into making nude pics (or worse) of themselves by "a friend" and subsequently extorted. The damage could be less if we were not so ashamed of out bodies. Everyone has genitals and desires, it is not a big deal - it's something that we artificially created.
@ErikvanStraten @farbenstau @jwildeboer E2EE is something that makes people glaze over time and time again. Well written reply, thank you. And yes, people are overly prudish but that is from the viewpoint of a naturist talking about most other folk. And no, no one gets photos so don't think about asking.
@RosePuckey : don't worry, I definitely have been young, but that's a long time ago!
What worries me is that politicians believe that we can combat child abuse by enforcing ChatControl. OTOH child abuse *is* a big problem - unfortunately without easy solutions.
@ErikvanStraten @farbenstau @jwildeboer
As a child abuse victim, I would say that it's a huge problem. There needs to be an openness to talk about these things though and that, as far as I can see, is the way ahead. If parents could have those all important conversations with their children and explain to them in a way that they will understand, it would go a long way to start addressing the problems. Equally, there should be a safe route for people of all ages to talk about their abuse, the family is not always an option.