Update Signal and pay attention when joining groups:
https://www.wired.com/story/russia-signal-qr-code-phishing-attack/

👉 No, Signal has not been compromised
👉 No, Signal encryption has not been broken
👉 No, there is no back-door in Signal

You should continue using Signal. The update is responding to a sophisticated, state-level attack targeting specific groups.

Unless you are a high-value target, you are almost certainly never going to see this in the wild.

If you know you are a high-value target, ask your support.

#InfoSec #Signal

A Signal Update Fends Off a Phishing Technique Used in Russian Espionage

Google warns that hackers tied to Russia are tricking Ukrainian soldiers with fake QR codes for Signal group invites that let spies steal their messages. Signal has pushed out new safeguards.

^{Andy Greenberg (WIRED)}

There's a "Signal deanonymized" thing going around:
https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117

Stay calm. Deep breaths.

👉 while this is a real consideration, the only thing the attacker gets from this is a very rough (kilometers or tens of kilometers radius) location

👉 other communication platforms that use any kind of caching CDN to deliver attachments are just as affected

👉 you almost certainly should continue to use Signal, unless you specifically know that this is a big problem for you.

#Signal #InfoSec

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform - research.md

^Gist

Alright I'm gonna put a bigger effort to switch to Signal this time around and get a few friends roped in. I installed the APK just recently. I have some questions and am hoping some of y'all fedibrains would have an answer.

1. Is there any privacy difference between Signal from the Google Play store vs installing the APK from Github?

2. Given how locked down iPhones are, could that make Signal inherently less private?

3. Are calls also e2e encrypted?

4. Is it safe to put my Signal username on my bio? Or should that only ever be shared in private?

5. Can anyone with my Signal username also see what name I set as my first name?

Some of these questions might be dumb because I'm still learning the ropes. Thanks in advance!

#signalapp #signal #privacy #messaging #socialmedia

Krótko i treściwie, dlaczego warto używać Signala i jak go zainstalować (nadaje się do podsyłania mniej technicznym znajomym, których chcemy przekonać do jedynego słusznego komunikatora 😉)

https://www.youtube.com/watch?v=iwB_zC51KlY

PS. Czy można jeszcze liczyć na jakąś instancję Invidious, czy YouTube pokonał już wszystkie?

@signalapp @mateuszchrobok #infosec #cyberbezpieczenstwo #signal

Signal - komunikator, z którym możesz czuć się bezpiecznie

Proponuję Ci korzystanie z Signala, jednego z najlepszych, chociaż nie najpopularniejszych komunikatorów. Dlaczego? Ponieważ w bezpiecznej komunikacji nie ch...

^YouTube

"Proxy Please: Help People Connect to Signal"

https://signal.org/blog/proxy-please/

#signal #proxy #ru #rupol

Proxy Please: Help People Connect to Signal

Several countries have recently blocked Signal, leaving their residents without a trusted and safe place to communicate.

^{Signal Messenger}

#tymczasemwRosji Roskomnadzor postanowił zablokować Signala - "z powodu naruszenia wymogów rosyjskiego prawa", rzecz jasna

Źródło: xakep[.]ru/2024/08/09/signal-blocked/

#rosja #signal

So Russia blocked Signal - https://www.reuters.com/technology/signal-messenger-blocked-russia-says-roskomnadzor-ifax-2024-08-09/

"Access to the Signal messaging app is blocked in connection with violation of the requirements of Russian legislation which must be complied with to prevent the use of messaging apps for terrorist and extremist aims,"

So thankful that Russia goes after those extremists using Signal! Russia already has enough on their hands dropping bombs on hospitals and supermarkets and invading other countries! Fuck off extremists!

By the way we ship TROMjaro with a trade-free VPN to bypass these stupidities.

Also: Signal Settings > Privacy > Advanced > Censorship circumvention (on)

#signal #signalmessenger #russia #war #linux #tromjaro #trom

Come

Let's switch to Signal: https://signal.org/install

#privacy #signal #messenger

@grin @euronews @fdroidorg
If "just use #Signal" was a working strategy, it would be illegal around the globe and would've gotten hacked like #EncroChat...

Oh wait, #CloudAct means they'll already have to integrate #Govware #Backdoors and #ITAR means they can't "export" secure #cryptography.

@grin @euronews @fdroidorg you miss the point:

#Signal has to convince me - and all other critics - to trust them, not the other way around.

And they certainly refuse to acknowledge said issues or provide transparency for "why"...

And that's always a bad sign!

Before me asking others here in the #fediverse for recommendations about #Fdroid #apps , I did not know about #KryptEY

https://github.com/amnesica/KryptEY

It is an #Android keyboard for secure #E2EE communication through the #signal protocol in any messenger.

GitHub - amnesica/KryptEY: Android keyboard for secure E2EE communication through the signal protocol in any messenger. Communicate securely and independent, regardless of the legal situation or whether messengers use E2EE

Android keyboard for secure E2EE communication through the signal protocol in any messenger. Communicate securely and independent, regardless of the legal situation or whether messengers use E2EE -...

^GitHub

• Signal (9 votes)
• WhatsApp (5 votes)
• Facebook Messenger (8 votes)
• iMessage (5 votes)
• Android Beskeder (4 votes)

This article about a #CIA offshoot funding several prominent Internet #privacy projects is pretty damning on its own, but it will not change my app usage decision. I do not personally use #Signal to be protected from nation-state level #surveillance.

However, it put in perspective Edward Snodwen's recent "testimonial" for the app as being alive as a good reason to use Signal. Now I do not believe this is the main reason or even a reason at all he hasn't been assassinated on the US government orders yet.

Bottom line, even if Signal had a US-government backdoor, I'd still recommend its use to protect oneself from corporate surveillance.

Given #Signal 's current infrastructure issues, I started donating $5 a month to the Signal Technology Foundation non-profit behind it through my company's donation-matching platform so they will get $120 a year from me from now on.

Please donate with me