2025-06-16 20:45 UTC
@micahflee@infosec.exchange Good article -- I learned some things.
But, right after talking about being in a group with 500 members, you say:
> […] a Signal group [is] all private, and it can't be shared with law enforcement.
A conversation with 500 people isn't private. Any one of their (possibly multiple) devices might be hacked, or confiscated by law enforcement. Some of the members may BE law enforcement.
It's important not to oversell the security of the protocol w/ such a big attack surface area.
Replies (2)
-
@andymouse@todon.eu 2025-06-16 21:07
@NfNitLoop@mastodon.social This. Not to mention each of those 500 members are identified with their phone numbers, and there is no real indication (except "we promise") that Signal isn't passing along group memberships to law enforcement to begin with. Just use email or whatever texting app you already have. Or use an actually secure alternative, i.e. one where you do not have to provide your phone number to use the service and there is not a single US-based company hosting all the communications. @micahflee@infosec.exchange
-
@noplasticshower@infosec.exchange 2025-06-17 15:14
@NfNitLoop@mastodon.social @micahflee@infosec.exchange this seems to have happened with the DoD. LoL.