Why do people assume Signal messenger isn’t spying on you? Yes, it has open source code, yes it uses end-to-end encryption. But we can’t check which code runs in the version from Google Play or the App Store. And also their APK (IPA) build process is essentially a black box, it doesn’t use GitHub Actions or some other transparent build system. I also heard from Techlore that they add a proprietary part to the apk to filter bots. The only thing I can assume is that people scanned the traffic coming from the app (Android), phone (iOS) and checked whether encryption keys were being sent to Signal or not. But it seems to me that this can be also circumvented. What do you think?

P.S. I myself use Signal to communicate with relatives and friends. Definetly not a hater.

  • @[email protected]
    link
    fedilink
    481 year ago

    Because they were brought to court to give info for a case and they proved they didn’t have any.

    • bbbhltz
      link
      fedilink
      English
      261 year ago

      Right! To date, and according to this doc from 2021, they can only provide date and time of account creation and date of last connection.

    • poVoq
      link
      fedilink
      21 year ago

      This is only for retro-active cases. A judge can perfectly well order them to do live surveillance of users and put it all under a gag-order and have the police ex-filtrate the data so that Signal can still claim they are not storing any of it.

      Like all centralized services their claims to privacy are very shallow and the FBI is known to have tried to get paid informants on these large messenger companies to ex-filtrate data even without the above mentioned legal way via a court order.

      • @[email protected]
        link
        fedilink
        01 year ago

        You are incorrect. They cannot be compelled into developing a feature that does not already exist.

        • poVoq
          link
          fedilink
          01 year ago

          First of all yes they can, and secondly that’s not a new feature but any server has that built in by default. The question is just, is it stored or not.

    • FarLine99OP
      link
      fedilink
      -91 year ago

      From whom did this information come, from Signal themselves? It’s like asking a criminal if you stole diamonds in that store at 3 a.m. And again, they may have disclosed these messages to the government, but together they agreed to say that Signal does not have anything. I think we need to think about such things 😉

      • Netto Hikari
        link
        fedilink
        English
        161 year ago

        They’d be jeopardizing everything if they lied in such a situation.

        There are still a few companies out there who truly stand for one’s freedom and privacy. Look at what happened to Mullvad VPN, for example. They were raided and there was nothing to be found, because their no-logs policy was actually true.

          • Netto Hikari
            link
            fedilink
            English
            41 year ago

            Yes, sure. But they’d still jeopardize everything their organization has done and also their own freedom, I guess.

        • FarLine99OP
          link
          fedilink
          English
          -81 year ago

          Maybe. Mullvad situation is same, they told us that they didn’t give any info to police. Same situation as with criminal when you ask him 🙂