• 0 Posts
  • 60 Comments
Joined 3 years ago
cake
Cake day: January 6th, 2023

help-circle
  • It’s funny how every poster who criticizes Signal inevitably makes a technical error. In your case, the claim that “Basically if you are an organizer, criminal, government, part of a hunted opposition, you will leak the whole core group structure of your org with attached phone numbers” entirely lacks basis. The Signal client - the OSS part we can and do control - does not divulge phone numbers.

    You have this theory that Signal’s servers are storing communication records. (While there is no evidence to support this, it’s valuable to consider what they could do.) So the data that would be captured here is a network of hashed phone numbers and literally undecryptable messages. It’s impossible for the adversary to determine any phone numbers they don’t already know this way.

    And since you can make a Signal account with a burner phone and create a “username”, even a known phone number becomes useless against targets who don’t want to be identified.
















  • I acknowledge that the idea is amusing.

    Let’s be clear: anything that prevents devs from pushing to a branch will necessarily result in code being isolated on a dev’s local machine. This is always a bad idea, and will always lead to lost work. I’ve seen it happen too many times.

    Pre-commit hooks and pre-push hooks must be skipped, and eventually deleted. Every single time.