<![CDATA[A response to recent reporting in Germany, in service of clarity and accountability:]]>A response to recent reporting in Germany, in service of clarity and accountability:

First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, and the integrity of the app’s code was not compromised. 1/

]]>https://board.circlewithadot.net/topic/b14eef07-29a0-4bb8-82c6-3366f4536ee8/a-response-to-recent-reporting-in-germany-in-service-of-clarity-and-accountabilityRSS for NodeFri, 01 May 2026 01:52:36 GMTMon, 27 Apr 2026 20:54:50 GMT60<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 13:18:20 GMT]]>@radieschen 💯

@claudius @ahltorp @jtb

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/davep/statuses/116482526425265431https://board.circlewithadot.net/post/https://infosec.exchange/users/davep/statuses/116482526425265431Tue, 28 Apr 2026 13:18:20 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 13:13:27 GMT]]>@claudius why should technical skills like that be a requirement for people to have something to say in politics? The stakes are too high as they are now, you need to have rhetoric skills, a mindset to make it to the top and a bunch of other privileges.

We shouldn't individualize everything, it's a structural problem and there should be structural measures in place to prevent politicians from making those mistakes. It's a government we're talking about, they have the resources.

@davep @ahltorp @jtb

]]>https://board.circlewithadot.net/post/https://climatejustice.social/users/radieschen/statuses/116482507216905078https://board.circlewithadot.net/post/https://climatejustice.social/users/radieschen/statuses/116482507216905078Tue, 28 Apr 2026 13:13:27 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 12:59:26 GMT]]>@signalapp community note: Signal collects phone numbers

]]>https://board.circlewithadot.net/post/https://social.tudbut.de/objects/4bb38d5d-144e-4247-a28a-4b62f126192ahttps://board.circlewithadot.net/post/https://social.tudbut.de/objects/4bb38d5d-144e-4247-a28a-4b62f126192aTue, 28 Apr 2026 12:59:26 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 12:53:34 GMT]]>@stagerabbit @EarthOrgUK @jtb @ahltorp @davep @signalapp i am not lecturing you, you have to decide if you prefer giving in to what "society expects of you" vs. giving all my money to someone you don't trust.
Society expects lots of things, my recommendation is to only fulfill those that resonate with your heart ❤

]]>https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482429037241728https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482429037241728Tue, 28 Apr 2026 12:53:34 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 12:34:10 GMT]]>@EarthOrgUK That's also a big factor. Every couple of years I try to take some serious time and research alternatives. None yet that work for me. @gsc @jtb @ahltorp @davep @signalapp

]]>https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482352761983294https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482352761983294Tue, 28 Apr 2026 12:34:10 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 12:32:06 GMT]]>@gsc @stagerabbit @jtb @ahltorp @davep @signalapp Just did not have the mental bandwidth at the time, but that may change.

]]>https://board.circlewithadot.net/post/https://mastodon.energy/users/EarthOrgUK/statuses/116482344663684135https://board.circlewithadot.net/post/https://mastodon.energy/users/EarthOrgUK/statuses/116482344663684135Tue, 28 Apr 2026 12:32:06 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 12:26:51 GMT]]>@gsc Really? You'd go without a bank? I don't think you've considered the implications of not being banked In a society that expects you to be banked.
This is really "well, if he'd said that to *my* mother, I would have punched him out" territory.
@EarthOrgUK @jtb @ahltorp @davep @signalapp

]]>https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482323998764521https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482323998764521Tue, 28 Apr 2026 12:26:51 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 12:15:05 GMT]]>@EarthOrgUK @stagerabbit @jtb @ahltorp @davep @signalapp well, that is the next (and correct) step. But i see people give up much earlier, like others wronging them, and then there are no consequences at all. Did it suck to have to switch the bank? Of course. Did i complain in written form? Multiple times. Did i loose a lot of time, which would be unnecessary, if they had done their job well? Yes, totally. But i don't regret, and more so, bad shit also happens because we let them. I'm not here to blame anyone who decides to do it differently, but stepping up is always uncomfortable, yet is worth it most of the times.

]]>https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482277706938921https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482277706938921Tue, 28 Apr 2026 12:15:05 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 12:08:35 GMT]]>@stagerabbit @EarthOrgUK @jtb @ahltorp @davep @signalapp let me put it this way: if i don't trust them to handle passwords properly, i would not go there and hand them all my money, alternatives or not...

]]>https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482252179412704https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482252179412704Tue, 28 Apr 2026 12:08:35 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:58:53 GMT]]>@gsc @stagerabbit @jtb @ahltorp @davep @signalapp I have left one* of the banks in question and filed complaints every single day it took to leave with all my savings. I didn't have the spoons at the time to take it up with the regulators (financial and data), but I have been director/CTO of a regulated fintech, so I am fairly confident that I could get my complaint heard if I could devote 6 months of my time...

*It's complicated.

]]>https://board.circlewithadot.net/post/https://mastodon.energy/users/EarthOrgUK/statuses/116482214024760770https://board.circlewithadot.net/post/https://mastodon.energy/users/EarthOrgUK/statuses/116482214024760770Tue, 28 Apr 2026 11:58:53 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:53:57 GMT]]>@expertenkommision_cyberunfall @signalapp

You can make stuff auditable by having the conversations in a group chat that includes an "audit department" account. I think the US govt even has a forked version of the Signal client app that does something like this automatically.

]]>https://board.circlewithadot.net/post/https://mas.to/users/only_ohm/statuses/116482194643853898https://board.circlewithadot.net/post/https://mas.to/users/only_ohm/statuses/116482194643853898Tue, 28 Apr 2026 11:53:57 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:53:26 GMT]]>@skaphle
'Reasonable air of legitimity' is still going to be worse than 'Signal Support' and that would mean less people would be susceptible to these phishing attacks. I imagine it doesn't have to work perfectly to have less people be susceptible.
@expertenkommision_cyberunfall @signalapp

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/tnhd/statuses/116482192603024151https://board.circlewithadot.net/post/https://mastodon.social/users/tnhd/statuses/116482192603024151Tue, 28 Apr 2026 11:53:26 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:50:03 GMT]]>@signalapp @yetzt @energisch_

I *think* Signal's privacy guarantee implies Signal LLC not knowing users' display names, so they'd have no way of filtering them.

]]>https://board.circlewithadot.net/post/https://mas.to/users/only_ohm/statuses/116482179268821348https://board.circlewithadot.net/post/https://mas.to/users/only_ohm/statuses/116482179268821348Tue, 28 Apr 2026 11:50:03 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:44:29 GMT]]>@gsc You are privileged to have choices to switch to. I feel like I've already chosen the least bad options in my situation. I don't know where you live, but in many countries most banks have terrible security practices. @EarthOrgUK @jtb @ahltorp @davep @signalapp

]]>https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482157430624782https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482157430624782Tue, 28 Apr 2026 11:44:29 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:37:56 GMT]]>@stagerabbit @EarthOrgUK @jtb @ahltorp @davep @signalapp If i go to a store and get repeatedly scammed, i don't go there again. If a bank does not handle security in a proper way, I'd leave that bank(I've done that in the past). I don't get how you can stick to your bank, if you believe their security is weak. It's their core competence after all...

]]>https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482131687383243https://board.circlewithadot.net/post/https://mathstodon.xyz/users/gsc/statuses/116482131687383243Tue, 28 Apr 2026 11:37:56 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:10:35 GMT]]>@ahltorp @davep You're lucky in Japan if your bank even has it and then doesn't charge you 2500 yen a month to use it.

]]>https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482024135639159https://board.circlewithadot.net/post/https://famichiki.jp/users/stagerabbit/statuses/116482024135639159Tue, 28 Apr 2026 11:10:35 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:49:46 GMT]]>@stagerabbit @davep I think most of the banks in Sweden are at least ok in this regard. I’ve had online banking for 30 years (pre internet), and it has always been two-factor. In the beginning only pin and single-use codes, but very quickly it became smartcard-based challenge-response with pin unlock of the smartcard, so theoretically very secure.

I’ve only done hanko based banking in Japan, so I’ve never seen online banking in Japan, but that seems horrible.

]]>https://board.circlewithadot.net/post/https://mastodon.nu/users/ahltorp/statuses/116481942250834737https://board.circlewithadot.net/post/https://mastodon.nu/users/ahltorp/statuses/116481942250834737Tue, 28 Apr 2026 10:49:46 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:21:20 GMT]]>@tnhd @expertenkommision_cyberunfall @signalapp "such names" is quite complicated. Is it a list? A regular expression pattern? Machine-learning? I have a whack-a-mole image in my mind when I think about it. It's a bit like spam filters in general. And in the end the scammers can just try different profile names and pictures until the filter lets it pass and it still has a reasonable air of legitimity. I'm quite skeptical that it's worth the effort.

]]>https://board.circlewithadot.net/post/https://social.tchncs.de/users/skaphle/statuses/116481830443496453https://board.circlewithadot.net/post/https://social.tchncs.de/users/skaphle/statuses/116481830443496453Tue, 28 Apr 2026 10:21:20 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:16:30 GMT]]>Weil es genügend Leute gibt, die nicht (so gut) englisch sprechen/lesen und man denen mit einer deutschen, offiziellen Mitteilung die Sachlage eher nahebringen kann.

@jabgoe2089

]]>https://board.circlewithadot.net/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481811447075038https://board.circlewithadot.net/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481811447075038Tue, 28 Apr 2026 10:16:30 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:13:50 GMT]]>L⌐ "SpätzleGrab™",8,1 WHY SHOULD THERE BE?]]>https://board.circlewithadot.net/post/https://hub.netzgemeinde.eu/item/57a71298-5d4c-41bf-8319-b8d30776f8d0https://board.circlewithadot.net/post/https://hub.netzgemeinde.eu/item/57a71298-5d4c-41bf-8319-b8d30776f8d0Tue, 28 Apr 2026 10:13:50 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:13:14 GMT]]>@ax11 @signalapp My comment was more directed towards @Chantology and @olliausstuhr who joked about the technical incompetence of the government, somewhat smugly, or so I read it.

]]>https://board.circlewithadot.net/post/https://social.tchncs.de/users/skaphle/statuses/116481798627256852https://board.circlewithadot.net/post/https://social.tchncs.de/users/skaphle/statuses/116481798627256852Tue, 28 Apr 2026 10:13:14 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:06:34 GMT]]>@signalapp
If you want to do everything you can to help people avoid and detect Signal Support scams, then please stop disguising your Signal communication and advertisment among my Signal Chats, like in my screenshot I attach here.

Link Preview Image
]]>https://board.circlewithadot.net/post/https://mamot.fr/users/xdej/statuses/116481772384996634https://board.circlewithadot.net/post/https://mamot.fr/users/xdej/statuses/116481772384996634Tue, 28 Apr 2026 10:06:34 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:59:55 GMT]]>Is there any OFFICIAL statement in GERMAN?

@signalapp

]]>https://board.circlewithadot.net/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481746239764397https://board.circlewithadot.net/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481746239764397Tue, 28 Apr 2026 09:59:55 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:52:53 GMT]]>@stagerabbit @EarthOrgUK @jtb @ahltorp @signalapp
At least I had to physically go to my local post office to activate my digital identity here in France.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/davep/statuses/116481718605493320https://board.circlewithadot.net/post/https://infosec.exchange/users/davep/statuses/116481718605493320Tue, 28 Apr 2026 09:52:53 GMT