you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 year ago (12 children)

Their server infrastructure is (run by Pentagon and NSA best buddies AWS).

  • source
  • parent
  • hideshow 12 child comments
  • [–] 1 point 1 year ago (11 children)

    And that means the government controls it?

  • source
  • parent
  • hideshow 11 child comments
  • [–] 2 points 1 year ago* (10 children)

    The infrastructure is under control of an antagonistic government, yes. Hetzner is also technically a private company, but they obviously willingly complied with requests from the German government.

  • source
  • parent
  • hideshow 10 child comments
  • [–] 1 point 1 year ago (9 children)

    And what are the implications of that control? It doesn't mean they can access anything on it. Especially not data that doesn't exist.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 1 point 1 year ago (8 children)

    They have live access to all of the metadata and can easily correlate that with phone numbers that Signal stores and shares on request of governments. Just because Signal claims they don't store anything doesn't mean that the ones that 100% run all the servers Signal uses don't access and store anything. You are being extremely naive if you believe Signals BS marketing.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 1 point 1 year ago (7 children)

    They have live access to all of the metadata and can easily correlate that with phone numbers

    I'd love to see the evidence you have for this.

    You are being extremely naive if you believe Signals BS marketing.

    I don't believe in marketing. I believe in open source code, security audits, and the entirety of the privacy and security community.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 1 year ago (6 children)

    Look, if you run the server you have access to metadata of clients connecting to it. That is networking 101. And that Signal shares phone numbers and connection timestamps is well established by court documents.

    The security audits are of the code and encryption algorithm, not the infrastructure.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 1 year ago (5 children)

    So you don't have any evidence.

    And that Signal shares phone numbers and connection timestamps is well established by court documents

    They do not share phone numbers. Phone numbers are the identifier, meaning if anyone wants the timestamps, they need to have it already.

    The only timestamps shared are when they signed up and when they last connected. This is well established by court documents that Signal themselves share publicly.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 1 year ago (4 children)

    I don't need evidence for water being wet 🤷

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 1 year ago (3 children)

    I can observe that water is wet. I cannot observe that the NSA is collecting mountains of metadata from Signal servers.

  • source
  • parent
  • hideshow 3 child comments