this post was submitted on 15 Aug 2025
7 points (62.1% liked)
Privacy
3546 readers
90 users here now
Welcome! This is a community for all those who are interested in protecting their privacy.
Rules
PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!
- Be civil and no prejudice
- Don't promote big-tech software
- No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
- No reposting of news that was already posted
- No crypto, blockchain, NFTs
- No Xitter links (if absolutely necessary, use xcancel)
Related communities:
Some of these are only vaguely related, but great communities.
- !opensource@programming.dev
- !selfhosting@slrpnk.net / !selfhosted@lemmy.world
- !piracy@lemmy.dbzer0.com
- !drm@lemmy.dbzer0.com
founded 9 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Hi, what about gnu linux xz utils backoor scenario? Also is there any regular auditing of signal by third party auditing company?
About simplex its not allowed in my threat model, I will rather use pure xmpp protocol with omem as an alternative.
Why not simplex?
This was caught by the community thanks to it being FOSS, and it was somewhat distinct from the scenario we're talking about here, since the repository was wholly taken over by a bad actor who tricked the original (burnt out) maintainer to hand over the repo.
Could a bad actor get their claws in and take over the repo? Possibly, but given the fact that it's maintained by a foundation with lots of devs and not just one thankless hobbyist, that likelihood is probably small.
Regular? I don't know. They have been audited, iirc, and they have received numerous legal requests to turn over data to courts, to which they've been able to reply "what data?" Bear in mind that they would almost certainly not do this if it meant jeopardizing their entire business. No business is going to go to jail for us, after all.
You do what you feel is appropriate for your threat model, but as far as general threats to privacy or Signal's existence go, I'm not currently concerned about their future.
Hi, I think you not really understood threat that I published -undercover agents -developers that will apply for the job at signal and receive it, and they will do their backdoor without Signal foundation knowing,its obvious. About audites that you mentioned - could you provide some link to it?