420official
Joined 6 years ago
Joined 6 years ago
I think they could make that significantly more difficult by adding csprng delays and padding to the messages. That way you can't really effectively correlate timing and sizes without direct access to signals inner workings. I'm not sure what signal's actual throughput is, but if think as a paid feature it could be economical.
Another crazier way would be to send every message to a large number random latched recipients. Good way to 1000x your bandwidth.
> The metadata is as valuable as the data.
This can be true if you are able to get ahold of a user's device and access their signal messages. It's not true in most other cases. I don't particularly care if you know that I am talking to someone specific as much as I care that you don't know what I'm saying.
The lack of any attribution at all is the ultimate issue like you point out, but the force push demonstrates intent over honest mistake in my opinion.
I concede that if you can't trust the device itself you can't trust anything running on it, but why have you resigned yourself to that? And how does that reflect on signal at all?
If the US and allies didn't want to spend the 300b they should've stuck with the existing agreement that didn't include 300b in repairs.
The problem isn’t necessarily that some one can buy a seat for themselves (though some people out there could spend 1000x as much as half a billion and still have 500 billion to spend), it's that for less than half a billion, someone can buy 20 house or senate seats for more conventional candidates that are willing to vote the way the financier wants.
- https://docs.gitlab.com/ci/secrets/id_token_authentication/#... - https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_pr...