this post was submitted on 06 Mar 2024
127 points (98.5% liked)
Privacy
4027 readers
2 users here now
A community for Lemmy users interested in privacy
Rules:
- Be civil
- No spam posting
- Keep posts on-topic
- No trolling
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Unless signal demonstrates they can't link usernames to phone numbers, I call BS.
Privacy by policy is great, but it's not zero knowledge. Since they designed the system to ultimately identify people to phone numbers there will always be the potential they are logging all the username phone numbers hash lookup tables
The article states that they are only saving a hashed copy of the currently set username, if any. While they might in theory keep more than that on hand, their policy has always been to minimize accessible data, and have responded in kind whenever subpoenaed, which is at least a very strong evidence.
The code is also fully open source for both server and client, so you could independently validate it yourself.
Are you sure code for server is open source? I thought only the client was.
I think you are confused between telegram and signal.