This leaves a very bad taste in my mouth. Unclear how much practical damage this caused (how many security analysts are using the Signal server source to look for vulns?) but this is damaging to the project's claims of transparency and trustworthiness.
It’s quite clear that this crypto integration provides a perverse incentive for the project that points in the opposite direction of security.
It’s quite clear that this crypto integration provides a perverse incentive for the project that points in the opposite direction of security.