<![CDATA[All my attempts to communicate a vulnerability in #Signalapp have failed - I have not received any response to my multiple messages to them.]]>All my attempts to communicate a vulnerability in have failed - I have not received any response to my multiple messages to them. Good people have tried to forward my concern to them (and I am thankful for your efforts and help), yet this has been to no avail.

I am disappointed in the lack of communication from Signal. I will be disclosing the full details of the issue later today (with end-user mitigations), after the six-month anniversary of the initial report.

]]>https://board.circlewithadot.net/topic/27b54841-61e5-4419-8ca5-ece4718448cb/all-my-attempts-to-communicate-a-vulnerability-in-signalapp-have-failed-i-have-not-received-any-response-to-my-multiple-messages-to-them.RSS for NodeThu, 04 Jun 2026 23:42:34 GMTFri, 22 May 2026 05:50:24 GMT60<![CDATA[Reply to All my attempts to communicate a vulnerability in #Signalapp have failed - I have not received any response to my multiple messages to them. on Fri, 22 May 2026 06:24:27 GMT]]>@harrysintonen Signal was once a great app, but in recent years, they've screwed their users over too many times. The sealed sender hoax, usernames only client side, the crypto scam, keeping server source code back for over a year. There are way better alternatives today that as a bonus aren't locked to AWS, are not centralized and don't require a SIM card.

@element works well, @xmpp remains a strong choice (except on IOS) and @simplex is the future IMP (once they fix the reliability of connections)]]>https://board.circlewithadot.net/post/https://rebelbase.site/objects/e8ec4557-357a-4695-949d-f5ed6d8f6fcahttps://board.circlewithadot.net/post/https://rebelbase.site/objects/e8ec4557-357a-4695-949d-f5ed6d8f6fcaFri, 22 May 2026 06:24:27 GMT<![CDATA[Reply to All my attempts to communicate a vulnerability in #Signalapp have failed - I have not received any response to my multiple messages to them. on Fri, 22 May 2026 06:05:49 GMT]]>@harrysintonen That's odd. I had no idea Signal was ignoring reports? They have a rather good reputation.

]]>https://board.circlewithadot.net/post/https://tech.lgbt/users/catraxx/statuses/116616721148059987https://board.circlewithadot.net/post/https://tech.lgbt/users/catraxx/statuses/116616721148059987Fri, 22 May 2026 06:05:49 GMT<![CDATA[Reply to All my attempts to communicate a vulnerability in #Signalapp have failed - I have not received any response to my multiple messages to them. on Fri, 22 May 2026 06:00:04 GMT]]>@vieiro @signalapp Indeed, they are.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/harrysintonen/statuses/116616698560011084https://board.circlewithadot.net/post/https://infosec.exchange/users/harrysintonen/statuses/116616698560011084Fri, 22 May 2026 06:00:04 GMT<![CDATA[Reply to All my attempts to communicate a vulnerability in #Signalapp have failed - I have not received any response to my multiple messages to them. on Fri, 22 May 2026 05:58:34 GMT]]>@harrysintonen

They are here in the fediverse at
@signalapp

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/vieiro/statuses/116616692645540752https://board.circlewithadot.net/post/https://mastodon.social/users/vieiro/statuses/116616692645540752Fri, 22 May 2026 05:58:34 GMT