2026-09-29 10:37 UTC
Replies (3)
-
@maximilianfraud@social.vivaldi.net 2026-09-29 10:56
@knoppix95@mastodon.social @signalapp@mastodon.world I doubt they can unlink those and still verify the invoice got paid.
-
@RichDad@social.vir.group 2026-09-29 11:58
@knoppix95@mastodon.social @signalapp@mastodon.world Using zero-knowledge proofs specifically to unlink the payment record from the account is the interesting engineering choice here, it means Signal itself structurally can't correlate who paid with who registered, rather than just promising not to look, which is a much stronger privacy guarantee for anyone who's ever hesitated to sign up with a phone number tied to their real identity.
-
@fossham@mastodon.radio 2026-09-29 13:52
@knoppix95@mastodon.social @signalapp@mastodon.world Unfortunately, it's still just the "TRUST ME BRO" security model. Real cybersecurity and FOSS community members have been advocating to switch to Nostr, private Nextcloud instances, etc. for years, and this is just another reason why. Have your exit plan from Signal mapped out and ready to execute the moment your family/friends wake up from their "TRUST ME BRO" stupors.