2025-06-16 18:26 UTC
Replies (9)
-
@Equity7804@hostux.social 2025-06-16 19:00
@micahflee@infosec.exchange Great guide, thank you so much!
-
@NfNitLoop@mastodon.social 2025-06-16 20:45
@micahflee@infosec.exchange Good article -- I learned some things. But, right after talking about being in a group with 500 members, you say: > […] a Signal group [is] all private, and it can't be shared with law enforcement. A conversation with 500 people isn't private. Any one of their (possibly multiple) devices might be hacked, or confiscated by law enforcement. Some of the members may BE law enforcement. It's important not to oversell the security of the protocol w/ such a big attack surface area.
-
@Powerfromspace1@mstdn.social 2025-06-16 21:04
@micahflee@infosec.exchange well since telegram is compromised by the state(s)
-
@chriswood@mastodon.design 2025-06-16 22:55
@micahflee@infosec.exchange fantastic read. The examples you gave were so easy to understand. You did an amazing job of showing how effective Signal is for organising groups, it’s brilliant to see it all in action.
-
@schmittlauch@toot.matereal.eu 2025-06-16 23:29
@micahflee@infosec.exchange Thanks for sharing your experiences. There is one thing I’d like to get your opinion on: While it is an important step that phone numbers are not shared as a public identifier anymore, users still need to enter a name used for _all_ chats. Those using Signal for personal chats with friends and acquaintances will probably enter their real name. But when planning semi-public events with a semi-trusted group, folks might better not reveal their full identities. What now?
-
@platypus@glammr.us 2025-06-16 23:44
@micahflee@infosec.exchange oh wow, the announcement only thing with reacts could be useful for one I’m part of. People are generally great about only replying if doing the thing but every month or so we have a squirrelly day
-
@MurrayWindripper@fosstodon.org 2025-09-03 16:15
@kkarhan@infosec.space This is mentioned in the article and why Signal is the "good enough" option for the various abilities of people wishing to communicate securely. @micahflee@infosec.exchange
-
@th@social.v.st 2025-06-17 18:35
@micahflee@infosec.exchange is there a way for announcement-only groups to hide the member list? this would prevent one compromised device from revealing the entire social graph (and would also avoid spamming the recipients with group membership updates). it seems that only admins should need to know all the identities and public keys.
-
@kkremitzki@mastodon.social 2025-06-17 18:37
@micahflee@infosec.exchange you rock. Thank you o7