Privacy

31866 readers

312 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

304

Signal leaked random contacts to me! (feddit.de)

submitted 11 months ago* (last edited 11 months ago) by ErKaf@feddit.de to c/privacy@lemmy.ml

97 comments fedilink hide all child comments

When I press on some message to forward it, it shows me Random usernames of contacts I don't know. And it even shows some Mobile Numbers I don't know. For example, one number starts with +964 that's Iraq. I'm from Europe tho. These contacts and numbers are from all over the place.

Edit: This only happens on Signal Desktop. If I try to forward a message on Android it only shows my Contacts. And none of these unkown ones.

you are viewing a single comment's thread
view the rest of the comments

[–] Ohh@lemmy.ml 2 points 11 months ago (1 children)

Well. I personally am very annoyed that i can't choose a specific pin for signal. That means my kid can read my messages, because yes... Keeping password from a child is neigh impossible. But my pin for element, fairmail, telegram he don't know.

So i get a lot of the criticism. For me personally, it's still a matter of trust. A future malicious molly version might eavesdrop. Signal will probably not do so.

Encryption at rest on an unlocked phone is probably a hard problem. But if somebody is targeting me to that extent, i am probably toast anyways.

I try to create enough usage so that journalists and activists can hide in the mob, and i can hide from fang.

I use element, but do worry about the local server implementation and leak of metadata.

[–] pkill@programming.dev 1 points 11 months ago

I see your point and don't negate such possibility. Although the black box nature of proprietary dependencies in vanilla Signal means an inclusion of potential trojan spyware. Speaking of the need for app lock, as an alternative solution, you can create a separate profile for Signal to have a dedicated PIN. But afaik only GrapheneOS allows notification relaying to main profile. LineageOS on the other hand has a feature called AppLocker. If you intentionally lend your device to kids, Android has a feature called app pinning.