From 1551c3446ceee6d53a2c920e56a3a75d9031b9c8 Mon Sep 17 00:00:00 2001 From: qorg11 Date: Sat, 24 Oct 2020 17:31:10 +0200 Subject: [PATCH] Added more info to the signal article --- wip/signal.html | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/wip/signal.html b/wip/signal.html index 80d301a..4daeaf4 100644 --- a/wip/signal.html +++ b/wip/signal.html @@ -16,12 +16,51 @@

You cannot create an account in Signal without giving it your phone number.

Signal is not completly Peer-To-Peer

Signal claims to be a Peer-To-Peer messenger. But this is not true because Signal stores your phone number in the servers.1

+

Signal has the decryption keys of their messages

+

+ The Signal legal terms3 claims they have the + decryption keys: + + "Additional technical information is stored on our servers, + including randomly generated authentication tokens, keys, push + tokens, and other material that is necessary to establish + calls and transmit messages. Signal limits this additional + technical information to the minimum required to operate the + Services." + + It also says it would give info to the government and law + enforcement agencies: + + Third Parties. We work with third parties to provide some of our + Services. For example, our Third-Party Providers send a + verification code to your phone number when you register for our + Services. These providers are bound by their Privacy Policies to + safeguard that information. If you use other Third-Party + Services like YouTube, Spotify, Giphy, etc. in connection with + our Services, their Terms and Privacy Policies govern your use + of those services. + + Please note the "Services like youtube, spotify, giphy". Those + sites are in the Signal source code4, so they can spy + on you. + + Then, we have this: + + Other instances where Signal may need to share your data + + To meet any applicable law, regulation, legal process or enforceable governmental request. + To enforce applicable Terms, including investigation of potential violations. + To detect, prevent, or otherwise address fraud, security, or technical issues. + To protect against harm to the rights, property, or safety of Signal, our users, or the public as required or permitted by law. +

Further reading

Signal considered harmful

References

1: A Look Into Signal’s Encrypted Profiles

2: Request: Google Play signed download alternative

+

3: https://signal.org/legal/

+

4: https://signal.org/blog/signal-and-giphy-update/