2026-02-11 19:45 UTC
@signalapp@mastodon.world Signal IMO has bad security because when someone decides they are not interested in an overpriced, underperforming service of "phone number" and stops using their SIM, they cannot deregister the number from Signal and the new owner of the number either can hijack their Signal account, or people may be blocked from using newly purchased SIMs with Signal.
Also, authoritarian regimes IMO can temporarily transfer a number into a provider's internal SIM in order to hijack a Signal account and impersonate a dissident against another dissident, facilitating abduction, torture and murder.
I feel
c o n t e m p t
towards Signal when it is designed this way.
#badsecurity #incompetence #signal #phonenumberasidentity #security #SIM #contempt #securityhole #securityflaw #attack #hijacking #torture #murder #abduction #authoritarianism #regime #authoritarian
Replies (3)
-
@gettie@fedi.catto.garden 2026-02-11 19:48
@clock also, here's a simple problem i had to face. i lost access to my phone number and since the signal account is tied to that specific phone number, i can't use the account anymore. @signalapp
-
@BuckRogers1965@techhub.social 2026-02-11 20:35
@clock @signalapp Is signal open source? Can't someone fork the code and change it to be pure peer to peer over onion routing to set up credentials?
-
@bash2@momou.social 2026-02-12 06:20
@clock @signalapp Did you know that you can re-register with your PIN only? https://support.signal.org/hc/en-us/articles/5440120029082-Re-registering-using-your-Signal-PIN There is even an option to require the PIN for re-registering your account in the settings. Search for "Registration Lock" in the settings.