Hacker News new | past | comments | ask | show | jobs | submit login

> How about not storing any information at all?

Acc to telegram:

> Telegram may disclose IP addresses and phone numbers

How do you propose this data is masked? You need a phone number to use Telegram (and Signal), and you need an internet connection, thus exposing your IP address.

I’m not sure why you think Signal does not have this information.




Signal has been subpoena'd in the past, and the only relevant information they were able to provide were account creation date and account's last connection date. Literally nothing else. It's actually a little funny to read:

https://signal.org/bigbrother/cd-california-grand-jury/


That was in the past though. Now Signal is storing exactly that same information permanently in the cloud. Specifically they store your name, phone number, photo, and a record of every person you contact.


Metadata is enough to execute people (by certain country but anywhere in the world--it is immoral for Signal to position itself as secure if it provides such data).


Last I checked Signal was outright lying in their privacy policy which was never updated after they started collecting and storing user data in the cloud. You can't morally market yourself as secure while you lie to your users about what their risks are.


When did that change and how do you know about this?


But did you actually read that? It specifically doesn’t mention the obvious data that they do have (phone and IP), but instead focus on other sensitive metadata:

> variety of information we don’t have, including the target’s name, address, correspondence, contacts, groups, calls.


Matrix won't have this information, if you have your own server.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: