{"id":31369,"date":"2021-01-19T16:33:20","date_gmt":"2021-01-19T21:33:20","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=31369"},"modified":"2021-01-19T16:33:20","modified_gmt":"2021-01-19T21:33:20","slug":"signal-review","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2021\/01\/19\/signal-review\/","title":{"rendered":"Signal Review"},"content":{"rendered":"

Josh Centers<\/a>:<\/p>\n

Signal had a bumpy start, but it’s now a well-polished and full-featured messaging app available for the most common platforms: iOS, Mac, Android, Windows, and Linux.<\/p>

[…]<\/p>

Every part of Signal is open source. The clients are published under the GPLv3 license, and Signal’s server code is published under the AGPLv3 license. All of Signal’s source code is available for public inspection on GitHub<\/a>. I should point out that while I’m a big fan of open source and believe it makes for better security, it’s not a panacea. Unless you compile the final binary yourself, you can’t know for sure what’s in the code. That’s not to say that Signal is doing anything nefarious, just that it’s not impossible.<\/p>

[…]<\/p>

One of Signal’s most prominent critics is Chinese maker and YouTuber Naomi Wu, who claims that Chinese activists using Signal were arrested by the Chinese government<\/a>. She has repeatedly pointed to two security vulnerabilities in Signal: the potential of compromised phone IMEIs and possible leaks from the phone’s keyboard software. To be clear, these concerns apply only to activists or people who are government-level targets.<\/p><\/blockquote>\n\n

Previously:<\/p>\n