Oddbean new post about | logout
 i think signal has been pwnt for a long time

not even many people know that it was originally named "redphone"

i was using that back in 2013, and the hole thing swings around spam resistance based on SMS confirmation

as many people know, SMS is broken security a long time ago, so their entire business model is in the toilet since years 
 they have usernames and PINcodes now 
 also, if the gov wants to read your messages it doesn't matter if your messenger is double-ratchet-super-encrypted... they just ask the OS to read your whole screen.

its nice for ISP level privacy tho 
 yeah, there is so many battles we are still not even close to winning 
 TextSecure and RedPhone were merged and rebranded as Signal: https://signal.org/blog/just-signal/