Email or username:

Password:

Forgot your password?
Top-level
tallship

@ilyess

Thank you for that. It was a really good read. 🙂

But still, that's really just an elegant way to farm particular aspects of ones identity and then hand it off to third parties; in particular, any other signal user that has your DID in their contact database, while absolving themselves (Signal) of any blame because they haven't revealed those identifiers to themselves.

It may sound innocent enough, but I actually see this as a much more egregious trespass.

⛵

.

@jay

4 comments
tallship

@ilyess @jay

500 character count limits really suck, lolz.

I have to add more to my previous sentiment:

Imagine (true story), an ex [dangerous stalker] girlfriend that you've finally rid yourself of and haven't heard from her in a couple of years.

You install Signal, and soon thereafter she begins sending you scary messages again after being reminded with a Signal notification that you were once an object of her insane obsessions.

I do look forward to usernames though. That will be awesome

ilyess

@tallship In your example, all you'd have to do is block the ex-girlfriend on Signal. Furthermore, unless you accept her initial conversation request, she wouldn't be able to access any profile information of yours (profile name, picture, bio, etc.).

I'm looking forward to usernames and phone number as well. Hopefully, the team would be able to focus more on this after stories are out.

BTW, some instances have a higher character count limit if you're into long posts.

@jay

ilyess

@tallship You're welcome :)

TBH I still don't get how any entity could farm particular aspects of any user. Could you please elaborate on this?

My understanding is that the only publicly available information is whether or not a given phone number is registered with Signal. And the only information Signal has on its users, and that can be subpoena'd, is the time of account creation and time of last connection to the server.

@jay

tallship

@ilyess @jay

Sure :) if be happy to.

Since she had my DID (phone number) in her contact database, she (apparently) received an alert when she installed Signal informing her that I was also a Signal. user.

I had previously blocked her phone number so she couldn't call me over the PSTN from her number, and I did just let the signal message sit there for eternity (still there, but I use Matrix or OMEMO enabled XMPP almost exclusively nowadays.

Unless she bothered to call from another phone...

Go Up