• Fuzzy_Red_Panda@lemm.ee
    link
    fedilink
    English
    arrow-up
    148
    ·
    4 months ago

    Tl;dr: Signal gave the court timestamps for three out of nine phone numbers that the court demanded data on. The timestamps were the dates three phone numbers last registered their accounts with Signal. That’s it. That is all the data there was to give.

    This is why I use Signal. This is why I donate monthly to Signal.

    • PatrickYaa@lemmy.one
      link
      fedilink
      English
      arrow-up
      19
      ·
      edit-2
      4 months ago

      Well, i’m not fluent in legalese, but isn’t the search order also exclusively asking for those two datapoints and nothing more? They’re not asking for message timestamps e.g. or other metadata.

      • Fuzzy_Red_Panda@lemm.ee
        link
        fedilink
        English
        arrow-up
        25
        ·
        4 months ago

        Good catch. It does look like that. Maybe the court already knew that Signal doesn’t have any data to hand over beyond the registration dates?

        • dhhyfddehhfyy4673@fedia.io
          link
          fedilink
          arrow-up
          14
          ·
          4 months ago

          Maybe the court already knew that Signal doesn’t have any data to hand over beyond the registration dates?

          That seems likely the case based off the series of previous warrants & subpoenas where they kept having to explain that they didn’t have any of that other shit to give.

      • atro_city@fedia.io
        link
        fedilink
        arrow-up
        8
        arrow-down
        2
        ·
        4 months ago

        Are you trying to turn this into “So, they got exactly what they wanted! Signal cooperated and are thus not secure!”?

        • PatrickYaa@lemmy.one
          link
          fedilink
          English
          arrow-up
          14
          arrow-down
          2
          ·
          edit-2
          4 months ago

          That is not what I’m trying, no. Sorry if it came across like that.
          My point is, that this isn’t an effective proof of a zero knowledge approach. In their blogpost, Signal says they don’t store anything, but this specific instance of a search warrant doesn’t serve to prove that.
          It is great of them that they publish when and what they are asked to disclose, that practice is definitly appreciated. I do trust Signal, it is my main messenger.
          This is just not the stresstest @Fuzzy_Red_Panda@lemm.ee makes it out to be in the top comment, imo.

      • Synestine@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 months ago

        Nope. The search order asked for all the usual telecom info (see Attachment A), but Signal doesn’t retain most of that data, so all they were able to provide were registration date and last seen date.

    • viking@infosec.pub
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      2
      ·
      4 months ago

      I tried to donate to signal, but they didn’t accept my wise.com virtual credit card. That’s the only type of payment I am willing to provide online, can’t help it.

      • Fuzzy_Red_Panda@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 months ago

        Yeah, currently it’s kind of a pain to donate to them. I’m pretty sure it can only be done directly through the app and it’s been a little buggy for me in the past; e.g. where the app claimed I wasn’t a monthly donor when, in fact, I am.

  • OsrsNeedsF2P
    link
    fedilink
    English
    arrow-up
    21
    ·
    edit-2
    4 months ago

    The court told Signal not to publish this information six times, and then when the extension period ran out Signal went and published it. Balls

    (Granted, they could have published this 7 months ago, but they still did in the end)