• sunzu2
    link
    fedilink
    -2917 hours ago

    Appreciate this, I don’t click links lol

    Apparently if they can get you to scan some bogus qr code they can get you add their device to your account.

    Why signal not cooperating tho? Following us government?

    • qaz
      link
      English
      1816 hours ago

      …I don’t click links…

      I strongly suggest doing so if you want to understand what the article is about

    • @[email protected]
      link
      fedilink
      English
      11
      edit-2
      17 hours ago

      Because they can’t without backdooring the software? Just like they also refuse to co-operate with Swedish government and threatened to leave the market should Sweden try to force them.

      You know Russian spies can also use TOR onion routing and so on.

      As for phishing there is nothing Signal can do about someone scanning a signal contact sharing QR and adding it to their contracts list beyond informative “hey are you really sure, really really sure you want to add this contact”. If user trusts someone they shouldn’t, no amount of app policy protections help. Or maybe they manage to shish them to scan and approve “share account to another device”. Again nothing Signal can do about that.

      • @Serinus
        link
        English
        016 hours ago

        As long as there’s a clear confirmation dialog.

    • Dr. Wesker
      link
      fedilink
      English
      8
      edit-2
      17 hours ago

      Not sure. Might be political tension. Might be that phishing attacks are typically user error, and Signal feels like at a certain point it’s not their responsibility. Hard to say beyond conjecture, and I didn’t see a clear reason given in the article.

    • TheFANUM
      link
      English
      117 hours ago

      That’s not how anything works