this post was submitted on 03 Nov 2026
-20 points (37.8% liked)

Privacy

51833 readers
1229 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 7 years ago
MODERATORS
 

Invidious link: https://invidious.tiekoetter.com/watch?v=TzGEmXync5M

An overview of Signal's long list of flaws (phone number id, Play service payments, centralized infrastructure, etc) and the history of The Signal Foundation of ignoring many of these issues.

Signal is disappointing. And I am tired of pretending that it’s not. I have been using and recommending Signal for longer than it existed. Signal just came out with a feature we have been waiting for for 8 years.

You see 8 years ago, the only flaw Signal had was that it required a phone number to register and find contacts. This was bad, because it meant you couldn’t get an anonymous Signal account, which meant you could get hacked or abused by anyone who knew your phone number. It was also easy for authoritarians to censor people’s access to Signal by denying phone registrations by country code.

The reason for the phone number requirement was to prevent spam. The primary function, was to use your phonebook to quickly onboard new users and send notifications whenever anyone in your contact list signed up on Signal. A very convenient Silicon Valley feature that allowed people to quickly connect with their friends and also let domestic abusers find out their victims are trying to contact a lawyer’s office over Signal.

you are viewing a single comment's thread
view the rest of the comments
[–] irotsoma@piefed.blahaj.zone 0 points 4 hours ago (1 children)

Google private vs secure communications. Privacy is the company not sharing information about your communications. Legally this is nearly impossible for a corporate entity without anonymity. But they could just as easily keep the data about who you are talking to secured and thus your privacy protected. They are private commercially in that they don't sell that information like most messaging apps, but they can't refuse an order from a government entity and thus are not 100% private. Again anonymity is one method of keeping your data private, the other is to have 100% control over that data like if you self hosted the central server then Signal could be private while still not being anonymous.

So anonymity is the only legal say to be private, but it isn't the only way to be private. They do keep your data private from data brokers, thus some privacy, but not 100%. Anonymity is much more difficult to accomplish while maintaining usability. Privacy is only difficult to accomplish while maintaining functionality because of legal obligations. So their policies are privacy oriented, but they can't guarantee that without anonymity which they can't do without loss of functionality.

What they can do, and do well, is security. Secure messages, security of metadata in motion, etc., but metadata at rest while secure, is not private from governments, only from corporations (currently, though this could change and is why people think they want anonymity not realizing they lose functionality.) Signal is secure, and as private as it can given the legal obligations, but it could change policies and decide not to keep your data private and then anonymity is needed which is what the OP is saying they need, but Signal has never said they will provide.

[–] artyom@piefed.social 0 points 4 hours ago (2 children)

Google private vs secure communications.

No u.

Privacy is the company not sharing information about your communications. Legally this is nearly impossible for a corporate entity without anonymity.

It isn't, and they don't.

they can’t refuse an order from a government entity and thus are not 100% private

They don't have to, because they are 100% private. They don't have information to share.

[–] Sxan@piefed.zip 1 points 2 hours ago

No u.

I wasn't even following þe argument but þis caught my eye.

Þank you 😂

[–] irotsoma@piefed.blahaj.zone 0 points 4 hours ago* (last edited 4 hours ago) (1 children)

No they absolutely know who every message on the server came from and who it's bound for as well as various other metadata. Governments can request this data as, while it is stored securely, the company has access and thus must give this information upon receiving valid requests. This is not 100% privacy especially in cases of things like journalists and government corruption whistleblowers. They can't say what they said, but they can say a particular user talked to a journalist.

[–] artyom@piefed.social 0 points 2 hours ago* (last edited 2 hours ago) (1 children)

Uhhhh no? They absolutely do not? And the page I just linked you to proves it. It's full of requests from the government where they did not provide any of the information you suggested.

[–] irotsoma@piefed.blahaj.zone 1 points 1 hour ago (1 children)

If their servers have no knowledge of who sent the message then what's the point of accounts and if they don't know who the message is for, how do they deliver it to all devices logged in under a given account, but not to every other user. Yeah they don't store an unencrypted list of every contact a user has or their user profile (which is what the site you point to says), but they do store metadata on the message itself and because those accounts are linked to real world phone numbers, they know who it belongs to, or at least the government does, not that it's hard to find out. This is exactly what the OP is saying and why anonymity is the only option for true privacy, which Signal does not provide, nor does it purport to. Yeah they don't sell your data. Yeah they don't want your contact lists, but they do hold a lot of private information about your activity out of necessity to receive and deliver messages.

If you're not even going to read the content of what you're referencing, I'm sorry but I'll have to stop my responses here. I don't have time or energy for trolling or willful or arrogant ignorance.

[–] artyom@piefed.social 0 points 1 hour ago

Yeah they don’t store an unencrypted list of every contact a user has or their user profile (which is what the site you point to says)

That's not what it says. I already told you what it says. It says they received many subpoenas from the government, and every single time the only thing they can provide is the first and last time a number connected to their servers. If you’re not even going to read the content of what I'm referencing, I’m sorry but I’ll have to stop my responses here. I don’t have time or energy for trolling or willful or arrogant ignorance.

nor does it purport to

Brother, literally just look at the fucking website. Or their fucking marketing. Or basically fucking anything that they produce. You are high on crack.

I'm going to take your refusal to provide evidence as an admission that you have none. Good day.