Gregory's ServerSignal has finally introduced usernames so you can use it without giving out your phone number. This is the number one feature I have seen prevent people from using Signal for many years and I’m happy it’s here!
 40 comments
@evacide That's great news! It might make me reconsider using Signal, indeed. Though, I'd like for the phone number to be optional altogether.  @SamantazFox @evacide So you still need to provide a (non-VOIP, non-landline likely) phone number to use it?  @DeltaWye @SamantazFox @evacide You do still need a phone number to register for Signal, yes. @evacide Very happy with this change. The next big thing form me would be a desktop app fully equivalent to the mobile app, especially able to seed a new mobile when the old device is lost or defective.  @evacide I thought it would have been requiring you give Signal your phone number in the first place (which you still have to do).  @incoherentmumblings @evacide Your phone number is your new social security number, basically. One common data point that can seamlessly connect the dots across thousands of different platforms.  @incoherentmumblings that's correct. However, the only data they have is that you have a signal account and the last time (not place and not how often) you connected to the signal network. We've seen that already play out through legal subpoenas. I understand that it may not fit everyone's risk profile but it's fine by mine and I'd imagine the vast majority of people. But it's good to know that detail and make an informed choice.  From what I can read, there is no mention of being able to register a new account without a phone number. It's all about not giving your phone number to anyone else (Signal of course already has it, and automatically ties it to your username). If new accounts can be created without requiring a phone number, this is actual privacy improvement. If not, it's PR bullshit. Has anyone tested this?  @andymouse @evacide "you will still need a phone number to sign up for Signal" @andymouse @evacide what do you use that provides what you are describing that is as good as signal E2EE? @andymouse respectfully, it makes a huge difference. I am a lot less concerned about Signal having my phone number than I am about every random I happen to be in a group chat with being automatically given my phone number.   @evacide I’m concerned about this: This suggests that if bad actor keeps old signal on their phone, they will still see your number? (Also, it implies that hiding the number is a receiving-client-side decision?)  @interpipes @evacide Let me help you with a citation: "Each version of the Signal app expires after about 90 days, after which people on the older version will need to update to the latest version of Signal. This means that in about 90 days, your phone number privacy settings will be honored by everyone using an official Signal app" @interpipes @evacide I do not work for signal and have no access to the source code of the server implementation. I think these are questions you could ask the people working at signal: @momo sure. They're also questions I'd direct at any trusted party suggesting that this is safe to rely on because my reading of the totality of what's been provided by signal - now with the benefit of the paragraph you highlighted - is that it *isn't* safe to rely on given the existence of 3rd party signal clients, so I was wondering if @evacide or anyone else who saw this thread perhaps *did* know better or saw something I've missed.   @evacide Without giving out your phone number TO YOUR CONTACTS. You still have to give it (at least a number you control) to Signal.   @mattcen I joined the beta yesterday I thought. Maybe I just need to wait for the update :) @evacide I give a GVoice number out to professional contacts, but can't use that with Signal. Now, I can just give them a username!    |
@evacide Finally!