Saying that Signal is "pretty secure and private" depends on your definition of ...

2025-04-07 16:53:27 UTC

Saying that Signal is "pretty secure and private" depends on your definition of security. I discussed all of this on my blog two weeks ago (https://www.cs.columbia.edu/~smb/blog/2025-03/2025-03-24.html); Matt Blaze (npub1jsl…93xu) has also made this point numerous times. Yes, the Public Records Act is important, but it's not the root of the security failure here.

Author Public Key

npub13x35ftqzhg3d4j8t5wnq955std7ytdelyktl9tuc7dk9kra0dazqrpjdre

Seen on

wss://relay.momostr.pink

Show more details

Published at

2025-04-07 16:53:27 UTC

Kind type

1 Short Text Note

Event JSON

{ "id": "7f8d011ef1a5834da530fe02248774f35acf333df16fbed4668b8782083441d9", "pubkey": "89a344ac02ba22dac8eba3a602d2905b7c45b73f2597f2af98f36c5b0faf6f44", "created_at": 1744044807, "kind": 1, "tags": [ [ "e", "91fa8ce3bc27234086569a8e352784a8646056eff53b6075f4c9f14fcb6ac620", "", "root", "89a344ac02ba22dac8eba3a602d2905b7c45b73f2597f2af98f36c5b0faf6f44" ], [ "p", "943e8c8ead6feeecd1e3ff12b1bab628e4c60ab92ff8b928a8ad3b827fc7e38d" ], [ "p", "89a344ac02ba22dac8eba3a602d2905b7c45b73f2597f2af98f36c5b0faf6f44" ], [ "p", "443b0891632ca12d6efdaedce300d4044b104332633191ce47df6717c25a4bba" ], [ "p", "f55c3b4fb789f193ac32243d36ae841f1e4188fdb7e74ecca8eece5065711e6d" ], [ "e", "44e5565333bc30a9ede1d4f725a1a8bf7cb6ae12c1c3ba062c082bcdf60de8a6", "", "reply", "f55c3b4fb789f193ac32243d36ae841f1e4188fdb7e74ecca8eece5065711e6d" ], [ "proxy", "https://infosec.exchange/@SteveBellovin/114297720471927527", "web" ], [ "proxy", "https://infosec.exchange/users/SteveBellovin/statuses/114297720471927527", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/SteveBellovin/statuses/114297720471927527", "pink.momostr" ], [ "-" ] ], "content": "Saying that Signal is \"pretty secure and private\" depends on your definition of security. I discussed all of this on my blog two weeks ago (https://www.cs.columbia.edu/~smb/blog/2025-03/2025-03-24.html); nostr:npub1jslger4ddlhwe50rluftrw4k9rjvvz4e9lutj29g45acyl78uwxsty93xu has also made this point numerous times. Yes, the Public Records Act is important, but it's not the root of the security failure here.", "sig": "4ebc48de4acac0eeb600f0a1a9d4a03a26ebd3ec6ff52aed979e4f3f7381b32ed60063cc596156242215de50c95111e67d23d730edf030ea531f6e27c2fb4c40" }

Steve Bellovin on Nostr: Saying that Signal is "pretty secure and private" depends on your definition of ...