this post was submitted on 12 Sep 2026
410 points (96.2% liked)

Technology

89506 readers
3132 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

cross-posted from : https://lemmy.zip/post/71321898

Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance

you are viewing a single comment's thread
view the rest of the comments
[–] DomeGuy@lemmy.world 11 points 1 month ago (2 children)

There are all of these stories about signal because it is notable when someone gets around it

That there's anything approaching secure communication on a cell-phone dominated Internet whose.operating systems are either "snobbish walled garden" or "ad agency living in the corpse of a search engine" is astonishing. In the same way that a gun safety that keeps a toddler from shooting themselves with an otherwise loaded gun is astonishing.

[–] muntedcrocodile@hilariouschaos.com -2 points 1 month ago (1 children)

Not to quote myself but:

Every time someone tries to raise any of these issues they are immediately shut down and told that its all for a good reason and that we should trust it.

[–] DomeGuy@lemmy.world 4 points 1 month ago (1 children)

You should trust signal tree the same way you trust a front door lock that has never been broken or picked despite repeated attempts to do both.

.Just remember that police only go through the door when it's easier than breaking a window or tearing through a wall.

[–] muntedcrocodile@hilariouschaos.com -1 points 1 month ago (1 children)

The US government has openly stated they killed people because of metadata and ur comfortable just giving that all away? U also didn't address any of my precise exact points you simply made a vague deflection.

[–] Natanael@infosec.pub 3 points 1 month ago (1 children)

Signal doesn't reveal that kind of metadata.

[–] muntedcrocodile@hilariouschaos.com 0 points 1 month ago (1 children)

All ur messages have a recipient address. All ur messages go though signal servers. You have an IP address that u communicate to said servers with. They know when and who you are messaging.

[–] Natanael@infosec.pub 2 points 1 month ago* (last edited 1 month ago)

Signal supports Tor.

They have features like Sealed Sender, which is at least on par with the multiple server behavior of Simplex as it behaves the same (message passing multiple servers, carrying no sender origin data in plaintext)

Simplex knows the same thing. The pairwise identifiers is a sham - all your different identifiers point to the same Android/iOS notification server API key so they know the recipient is the same person, they can tell which exact phone receives a notification when somebody sends you a message (unless the devs use anonymized fetch on a polling schedule, which they don't).

And because they don't hide those sender stamps, Simplex leak more info than Signal with Sealed sender

Why is Simplex asking for investors?

Are Simplex even considering notification content security?

[–] GreenKnight23@lemmy.world -3 points 1 month ago (3 children)

can't get around simplex encryption unless you have physical access to the device or have been physically invited by a member.

[–] SupraMario@lemmy.world 3 points 1 month ago (1 children)

You... didn't read the article did you... that's literally what happened here lol

[–] GreenKnight23@lemmy.world 1 points 1 month ago (1 children)

lol

either through physical access to someone’s phone OR by intercepting verification codes via a state-sanctioned phishing attack OR intercepting SMS messages via telephone surveillance

it's literally a quote in the post. physical access was only one way they accessed messages.

[–] SupraMario@lemmy.world 1 points 1 month ago

That's not the point I was trying to make. You are acting like simplex is better than signal because it requires physical access... that's how it works for signal as well...that was the point...

[–] Natanael@infosec.pub 2 points 1 month ago* (last edited 1 month ago) (1 children)

Ok so no better than Signal?

You can do all the same things and use Tor, allow Sealed sender, and rotate username with phone number hidden.

Why does Simplex want investors?

[–] GreenKnight23@lemmy.world 0 points 1 month ago (1 children)

what company doesn't want to grow or maintain services? they host the primary servers that everyone uses, that costs money.

you could host your own though. can you do that with signal?

[–] Natanael@infosec.pub 3 points 1 month ago (1 children)

If I only want to talk to my own group of people registered on my server yes

https://github.com/signalapp/Signal-Server

[–] GreenKnight23@lemmy.world -1 points 1 month ago (1 children)

as I pointed out in your other comment. signal uses a database, fails to explain why a database is required, and doesn't even make a mention of it in their technical information.

why use a database at all? that just introduces more attack surface area and complexity for attackers to leverage.

[–] Natanael@infosec.pub 0 points 1 month ago (1 children)

Yeah precisely you didn't check what it's for. It doesn't hold conversation data or even metadata.

[–] GreenKnight23@lemmy.world 0 points 1 month ago (1 children)

what 👏 is 👏 it 👏 used 👏 for

[–] Natanael@infosec.pub 0 points 1 month ago* (last edited 1 month ago) (1 children)

WHAT DO YOU THINK IT'S USED FOR

they have 45 day store-and-forward of encrypted attachments, and the handle registration thing, and that's it

Do you think they would want to go to federal jail for lying to federal agents when they insist they have no metadata about you?

Messages persist in memory or in a database until they cross a threshold of time, typically on the order of days.

https://github.com/simplex-chat/simplexmq/blob/master/protocol/overview-tjr.md

Hypocrite

[–] GreenKnight23@lemmy.world 0 points 1 month ago (1 children)

I'm about to block you because you're just spamming the same argument in two different threads.

simplex has a more secure and robust architecture when compared to signal. simplex router can literally run on a raspberry pi zero with 2gb of storage.

nothing is written to storage for simplex unless you configure it otherwise.

the defaults for signal selfhosting promotes convenience over security and does not appropriately protect admins from search and seizures.

signal is good, if all you want is to share memes with your friends, but if you want to build a network of trusted individuals for purposes that are actively targeted by corrupt governments, simplex wins hands down.

[–] Natanael@infosec.pub -1 points 1 month ago* (last edited 1 month ago)

Liar

By the way the Simplex CEO supports nazis

[–] DomeGuy@lemmy.world 0 points 1 month ago

breaking the encryption is hard , but getting around the encryption is entirely doable without physical access if you allow SMS or on-device sharing.