Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Eric K3FNB (they/them) (k3fnb@mastodon.radio)'s status on Saturday, 08-Mar-2025 12:47:09 JST Eric K3FNB (they/them)

   in reply to

   @feld @Avitus @VeroniqueB99 @adbenitez @SrRochardBunson

   Looking at the server side code, Signal stores the phone number with the account id.

   So if the cops were able to decrypt my phone app's database, enumerate all the account ids in my Signal's contacts/messages, they could submit a warrent to Signal a gain access to all the phone numbers associated with those account ids.

   The phone number has been my biggest complaint about Signal.

   https://github.com/signalapp/Signal-Server/blob/09b50383d77b8b8ec56ab1b74b022db8019cfec6/service/src/main/java/org/whispersystems/textsecuregcm/storage/Accounts.java#L120

2. Embed this notice
   Hrefna (DHC) (hrefna@hachyderm.io)'s status on Saturday, 28-Dec-2024 03:02:52 JST Hrefna (DHC)

   in reply to

   Now when someone goes to the server's canonical URI you'll get a full AS2 object (or whatever) in some normalized form. The details don't matter so long as the canonical_uri matches the id.

   So you can see how this starts to develop:

   Alice sends Bob a message saying that she created a Note (1).
   Alice sends Bob a message saying that she created a Note (2).
   Alice sends Bob a message saying that she created a Note (3).
   Alice sends Bob a message saying that she updated a Note (1).

   4/