How Trail of Bits helps verify the integrity of Signal chats(blog.trailofbits.com)
12 pointsby dgroshev8 hours ago2 comments
  • johnnyApplePRNG16 minutes ago
    Signal is an obvious honeypot.

    They make no money and have no plans to.

    • evrimoztamur11 minutes ago
      You commented this twice, what's your backing, besides 'they're non-commercial thus must be fed by nefarious actors'?
      • stavros2 minutes ago
        I'm also worried about that these days. They posted an article a while back that Signal costs $50m per year to run, and that they make that money from "things". Together with how low a profile they keep, I'm not convinced they aren't a honeypot.

        I love Signal and it's still my preferred messenger, but if it came out that they're backed by some government agency, I wouldn't be extremely surprised.

  • chewsan hour ago
    I have worked with Trail of Bits before and their cryptography teams are of the toppest of notches, I still have deep skepticism of Signal though. There are safer ways to use it, never getting push notifications is one part of it. I think their work is admirable, but the need for them to bootstrap you with SMS is a gotcha... they have usernames now, but even with those you have to have to bootstrap it with a number/identity.
    • ortekk26 minutes ago
      They will allow registering without phone number as a paid option soon.
      • johnnyApplePRNG17 minutes ago
        Lol how is that any better at all?

        Then they have your credit card or payment info.

        Signal is an obvious honeypot.

        They make no money and have no plans to.