• hsdkfr734r@feddit.nl
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        27 days ago

        I don’t think so. Metadata is unencrypted (i.e. your contacts, who sends messages to whom and how often and when).
        Messages itself are encrypted.

        Am I wrong?

        • sunzu2@thebrainbin.org
          link
          fedilink
          arrow-up
          3
          ·
          27 days ago

          It uses signal Protocol so it has the same design defect for leaking meta data.

          Both know who and when you are talking too. And thats really all the data the security apparatus cares about.

          • Lojcs@lemm.ee
            link
            fedilink
            English
            arrow-up
            2
            ·
            27 days ago

            Is that really how it works? I thought signal protocol was about just how the encryption worked, not what is encrypted?

            • sunzu2@thebrainbin.org
              link
              fedilink
              arrow-up
              2
              ·
              27 days ago

              I am not following this.

              Content of msg is encrypted and everything within but signal server knows when you talk to your girl becuase the server has to route it.

              So anytime you initiate a chat, they know that yall doing something.

              This meta data is what the game is all about tho.

                • sunzu2@thebrainbin.org
                  link
                  fedilink
                  arrow-up
                  2
                  ·
                  27 days ago

                  That’s for a generic court. FISA court order would never see a light of day and they would not waste that being exposed to the public.

                  They have technical capability to collect this meta data, that’s a fact.

                  We know that that for purpose of this court case they either did not or are under order to not disclose.

                  If security apparatus want this information, they can get it. Do you really think singal will say know and violate US law?

              • Lojcs@lemm.ee
                link
                fedilink
                English
                arrow-up
                1
                ·
                25 days ago

                The server doesn’t need to know or keep track of who’s sending a message to deliver it. If you don’t trust signal to not lie to the court about not collecting such metadata, I can’t convince you otherwise. But there’s a merit in designing your system so that such collection is as hard as possible.

                • sunzu2@thebrainbin.org
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  25 days ago

                  Bad analysis

                  Server knows each time you engage a person and who you are enaging. This is the meta data thats need for creatijg cohort groups

                  Also, you dont seemt to under how FISA order would work vis-a-vis regular court proceedings.

                  • Lojcs@lemm.ee
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    25 days ago

                    Are you’re familiar with how singal’s servers work? Even I can think of a system where all messages are collected in a common pool before being distributed, the actual security researchers that made signal surely thought of something better.

                    How does FISA make it legal for singal to lie to a court about what information they have? Please enlighten me

          • hsdkfr734r@feddit.nl
            link
            fedilink
            English
            arrow-up
            1
            ·
            27 days ago

            I guess that’s right. Although I’m (most likely) not a person of interest for any secret service. But the data could be interesting for marketing and insurance companies.