cross-posted from : https://lemmy.zip/post/71321898

Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance

    • GreenKnight23@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      2
      ·
      13 hours ago

      as I pointed out in your other comment. signal uses a database, fails to explain why a database is required, and doesn’t even make a mention of it in their technical information.

      why use a database at all? that just introduces more attack surface area and complexity for attackers to leverage.

      • Natanael@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        11 hours ago

        Yeah precisely you didn’t check what it’s for. It doesn’t hold conversation data or even metadata.

          • Natanael@infosec.pub
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            edit-2
            6 hours ago

            WHAT DO YOU THINK IT’S USED FOR

            they have 45 day store-and-forward of encrypted attachments, and the handle registration thing, and that’s it

            Do you think they would want to go to federal jail for lying to federal agents when they insist they have no metadata about you?

            Messages persist in memory or in a database until they cross a threshold of time, typically on the order of days.

            https://github.com/simplex-chat/simplexmq/blob/master/protocol/overview-tjr.md

            Hypocrite

            • GreenKnight23@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              6 hours ago

              I’m about to block you because you’re just spamming the same argument in two different threads.

              simplex has a more secure and robust architecture when compared to signal. simplex router can literally run on a raspberry pi zero with 2gb of storage.

              nothing is written to storage for simplex unless you configure it otherwise.

              the defaults for signal selfhosting promotes convenience over security and does not appropriately protect admins from search and seizures.

              signal is good, if all you want is to share memes with your friends, but if you want to build a network of trusted individuals for purposes that are actively targeted by corrupt governments, simplex wins hands down.