this post was submitted on 30 Aug 2024
144 points (100.0% liked)

The Signal messenger and protocol.

1635 readers
1 users here now

https://signal.org/

founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] PatrickYaa@lemmy.one 17 points 2 months ago* (last edited 2 months ago) (3 children)

Well, i'm not fluent in legalese, but isn't the search order also exclusively asking for those two datapoints and nothing more? They're not asking for message timestamps e.g. or other metadata.

[–] Fuzzy_Red_Panda@lemm.ee 25 points 2 months ago (1 children)

Good catch. It does look like that. Maybe the court already knew that Signal doesn’t have any data to hand over beyond the registration dates?

[–] dhhyfddehhfyy4673@fedia.io 14 points 2 months ago

Maybe the court already knew that Signal doesn’t have any data to hand over beyond the registration dates?

That seems likely the case based off the series of previous warrants & subpoenas where they kept having to explain that they didn't have any of that other shit to give.

[–] atro_city@fedia.io 7 points 2 months ago (1 children)

Are you trying to turn this into "So, they got exactly what they wanted! Signal cooperated and are thus not secure!"?

[–] PatrickYaa@lemmy.one 11 points 2 months ago* (last edited 2 months ago) (1 children)

That is not what I'm trying, no. Sorry if it came across like that.
My point is, that this isn't an effective proof of a zero knowledge approach. In their blogpost, Signal says they don't store anything, but this specific instance of a search warrant doesn't serve to prove that.
It is great of them that they publish when and what they are asked to disclose, that practice is definitly appreciated. I do trust Signal, it is my main messenger.
This is just not the stresstest @Fuzzy_Red_Panda@lemm.ee makes it out to be in the top comment, imo.

[–] dhhyfddehhfyy4673@fedia.io 2 points 2 months ago (1 children)
[–] PatrickYaa@lemmy.one 1 points 2 months ago

Thanks for the additonal link. It's interesting that Signal didn't provide the last time the user connected to Signal here, as that was information which was requested and information that they have...

[–] synestine@sh.itjust.works 1 points 2 months ago

Nope. The search order asked for all the usual telecom info (see Attachment A), but Signal doesn't retain most of that data, so all they were able to provide were registration date and last seen date.