Re: Schneier, Data and Goliath: no hope for privacy

On Thu, 20 Feb 2025, Scott Dorsey wrote:

Sn!pe <snipeco.1@gmail.com> wrote:

Salvador Mirzo <smirzo@example.com> wrote:

>
Can't Signal eventually be bought off?

>
They claim that it's end-to-end encrypted but whatever, it has
Whatsapp's functionality without being Meta and that's good
enough for me.

>
Signal does the encryption within the app, much like PGP.  So if Signal were
to compromise the app, it could be sniffed.
>
The good news is that sniffing the data between the sender and receiver gives
you nothing useful at any point unless the app is compromised.
>
The bad news is that updates are constantly being pushed, and just as it is
possible to push a security update, it is possible to push an insecurity
update too.
--scott

You get metadata such as timing of communication. Also I think a bigger threat to safe signal use is authorities just grabbing your phone or breaking into your unpatched 3 years old android device.
In sweden, that is how they crack a lot of private chat services, simply by going in through the phones.