• 3 Posts
  • 22 Comments
Joined 4 years ago
cake
Cake day: February 7th, 2021

help-circle












    1. if they leaked something you wouldn’t know because US government law doesn’t allow them to disclose if they requested data.
    2. uses AWS servers that also the gov could ask for access to Amazon directly without even talking to Signal, being centralized and depending on AWS infra is also a weakness.
    3. needing phone numbers to register, often tied to passport and it is super easy to get your whole network when compromising 1 device
    4. all centralized services start nice, attracting users, once they have you, and money starts being a problem… meet: enshitification









  • no, there is no important metadata leaked via headers, the only obvious data the server knows is the same as on Matrix and XMPP, when you tell the server to deliver the message to a given user, the server hence knows that X sent a message to Y, but since accounts are randomly generated email addresses without any personal data tied, this is more secure than Signal where phone numbers are collected by a central server and if they wanted to they can match your IP to your phone number even if you use sealed sender to send it is obvious who you are by your IP and timing since you also connect to the server non-anonymously to receive messages