Conversation

Notices

1. Embed this notice
   Signal (signalapp@mastodon.world)'s status on Wednesday, 21-Feb-2024 05:51:12 JST Signal

   Introducing usernames and phone number privacy on Signal!

   We’re making it possible for people to connect with each other without having to share phone numbers. Now launching to beta users, available for everyone soon.

   https://signal.org/blog/phone-number-privacy-usernames

   • Embed this notice
     Drew DeVault (drewdevault@fosstodon.org)'s status on Wednesday, 21-Feb-2024 10:00:10 JST Drew DeVault

     in reply to

     @signalapp fucking finally

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     l (link2xt@fosstodon.org)'s status on Wednesday, 21-Feb-2024 13:03:00 JST l

     in reply to

     • yawnbox :verified_gay:

     @yawnbox Signal server can lookup ACI (account identifier) by username because this is what Signal client asks it for:
     https://github.com/signalapp/Signal-Server/blob/4aa42466952ad81a6a48e8fa71ad5c456e71a022/service/src/main/java/org/whispersystems/textsecuregcm/controllers/AccountController.java#L382

     getAccountIdentity always returns E164 (phone number) given the ACI:
     https://github.com/signalapp/Signal-Server/blob/4aa42466952ad81a6a48e8fa71ad5c456e71a022/service/src/main/java/org/whispersystems/textsecuregcm/grpc/AccountsGrpcService.java#L88

     Looks like the server can lookup phone number by username.

     @signalapp

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     yawnbox :verified_gay: (yawnbox@disobey.net)'s status on Wednesday, 21-Feb-2024 13:03:01 JST yawnbox :verified_gay:

     in reply to

     @signalapp it seems you have not publicly documented how the usernames feature works in terms of the back-end.

     If the Feds subpoena Signal with a username, what data will they get from you? Will they get the user’s phone number? In reverse, if the Feds subpoena a phone number, will they get the associated username? What about one’s history of numbers/usernames?

     Haelwenn /элвэн/ :triskell: likes this.