How Trail of Bits helps verify the integrity of Signal chats

(blog.trailofbits.com)

12 points | by dgroshev 7 hours ago

2 comments

  • johnnyApplePRNG 11 minutes ago
    Signal is an obvious honeypot.

    They make no money and have no plans to.

    • evrimoztamur 5 minutes ago
      You commented this twice, what's your backing, besides 'they're non-commercial thus must be fed by nefarious actors'?
  • chews 39 minutes ago
    I have worked with Trail of Bits before and their cryptography teams are of the toppest of notches, I still have deep skepticism of Signal though. There are safer ways to use it, never getting push notifications is one part of it. I think their work is admirable, but the need for them to bootstrap you with SMS is a gotcha... they have usernames now, but even with those you have to have to bootstrap it with a number/identity.
    • ortekk 21 minutes ago
      They will allow registering without phone number as a paid option soon.
      • johnnyApplePRNG 11 minutes ago
        Lol how is that any better at all?

        Then they have your credit card or payment info.

        Signal is an obvious honeypot.

        They make no money and have no plans to.