Why Not Signal?

This funding stuff is absolute horseshit and people should be embarrassed to write it up.

What I believe they're referring to is a project that OTF (under, IIRC, the Broadcasting Board of Governors) ran for several years that funded audits for all online privacy technology. I'm aware of it because Matasano, the firm I helped run for 10 years, took (as I recall) several of these OTF projects.

Notably, these projects included all sorts of random privacy tech tools. It was clear at the time, to me at least, that anything anybody was using (or, in some cases, even talking about using) was eligible for funded audit projects.

This is a little like suggesting that because companies like Google fund critical internet infrastructure audits, the projects that get those audits are somehow compromised by Google.

I get that it's very difficult to disentangle the US IC from online privacy technology (this is a much bigger issue with Tor), but in this case, there is just nothing to the story, except maybe that people might want to know that there was at least one good thing, among a zillion bad things, that the US IC actually funded.

PS

The OTF projects I'm aware of all reported directly to the projects involved, not to OTF, and were totally standard software security assessments, with rules of engagement set by the projects themselves and results reported directly and exclusively to the project. It was just money OTF was shoveling into getting audits done for open source projects.

Signal works for normal people because it makes trade-off. For some people, some of there trade-offs are not acceptable. For most people, it is what makes it possible for them to use a communication technology that can reasonably be considered secure.

The author can barely contain his hatred for the politics of Signal's founder (about which I know nothing outside this article.)

More importantly, he's possessed by the fallacy that governments have agendas rather than people within governments having agendas. This is important because he uses it to say that nothing downstream of the CIA can ever have the goal of promoting anonymity. The most obvious contradiction to this within the domain of US intelligence agencies is NSA's freelance tool Ghidra, but hopefully that concept is amply clear when mentioned, even without examples.

Does Signal protect you from every possible thread model there is? No. Is it better than WhatsApp at avoiding being spied on and being monetized by the service operator? Definitely.

The fact that you have to identify yourself with a phone number is a big red flag IMO.

The 'CIA funded' bit this opens with has the quality and tone of similar things that put George Soros or the Illuminati at the center of all the all the ills of the world.

Not mentioned, but relevant: Signal's reliance on Intel SGX.

https://signal.org/blog/private-contact-discovery/ https://medium.com/@maniacbolts/signal-increases-their-relia...

Seriously, there are different threat models, and hiding from the CIA et al after a warrant is not one that many share. Signal replaced my SMS app. My text messages are secure against CASUAL inspection by 3rd parties. That is good enough for most applications. If I were worried about a governmental repercussions, say if I were a dissident in Afghanistan, Iran, or Russia, then different tools may (or may not) be selected.

Isn't this article just incorrect:

> Signals database, which we must assume is compromised due to its centralized and US domiciled nature, has a few important pieces of data;

> Message dates and times > Message senders and recipients ( via phone number identifiers )

Since Sealed Sender[0] in 2018, Signal messages only have the sender available under encryption, in other words the signal server can't store the sender. Conceivably it could store metadata about the sender, but such data isn't authenticated. The article fails to mention sealed sender at all.

As a consequence of this, and the way signal bootstraps contacts from phone numbers, you can't actually build any sort of social graph from signal. The signal server doesn't know my contacts on signal. It never has. It knows phone numbers with signal, and I know phone numbers and contact names, and you can join those things to get that my contact, Fred, uses signal. But that's all done on my phone, the signal server never knows that [1].

On the other hand, any system that uses a system of contacts managed within the application (e.x. you have a username and contacts tied specifically to the communication protocol) must maintain a contact graph. It's actually worse from this perspective. I think with a system like Keybase you could attest to having an identity on the platform, and use that to bootstrap but this is no better, and arguably worse, since you still need to publish that identity on the attestation platform.

[0]: https://signal.org/blog/sealed-sender/

[1]: Implementation detail I don't know here: whether or not you are sent all signal phone numbers, or if you reveal the contacts you know to the server. The first is obviously more private.

I use Signal and think it's pretty good while achieving its goals. The only other protocol I know that might be better for privacy is Tox, but it drains your bandwidth and any mobile device battery since it's decentralized.

My litmus test is simple on if Signal is good enough. It's banned in most totalitarian nations. It has to be more secure than iMessage, and it's not like I use it for criminal activity so I'm happy with it. If that's peoples idea, you'd want to avoid all-things-convenient (the internet) and use intermediaries, deal in cash only, etc. For simple messaging without the government cataloguing your every word, Signal works great.

The biggest threat to privacy is probably every device sold today having a microphone in it. Misuse for passive listening. Not the actions purposefully taken for communication like a text message.

This article sort of makes the case for Matrix but I find Matrix incredibly clunky and slow. Plus every time it "verifies" me it always goes back to the app on my phone like it's some sort of permanent and authoritative identifier. So in that sense it's similar to Signal and Telegram being attached to your phone in some way.

Hard to know what to trust these days. "Nobody" I guess.

Not sure how accurate this article is - e.g. it mentions Signal knowing who's in a given group chat, but AFAICT this isn't the case (from WP: "The group messaging mechanism is designed so that the servers do not have access to the membership list, group title, or group icon").

"you are not the target audience"

While I very much agree with the author's critiques on the architecture of signal (centralized service, under US government jurisdiction, phone number requirement and the maintainer's merciless effort to squash interoperability with other services, something antithetical to a supposed free software project) I think it is important to point out that the author is a self avowed Marxist-Leninist and their motivation for writing this is likely largely support for the sovereignty of the Chinese Communist Party.

This is not a character attack, it is pertinent information. The author does not actually value individual liberty or privacy from state apparatus, quite the opposite, and it would not be a stretch to call this article agitation.

It's a simple problem: it cannot replace iMessage. Until regulators wake up and break Apple's monopolization of their messaging, I have to stick to iMessage.