Tag
The Molly fork of Signal has not been updated in three months and remains vulnerable to security flaws already patched in mainline Signal, prompting recommendations to switch back to the official Signal app.
Signal introduces zero-knowledge proofs to allow user registration without requiring a phone number, enhancing privacy and security.
Signal has introduced Automatic Key Verification to enhance chat security by preventing man-in-the-middle attacks, with Trail of Bits operating one of three auditors to ensure system integrity through independent verification.
Signal's Contact Discovery feature was found to send contact lists to an SGX enclave, where a security breach by V12 leaked the key, potentially exposing user data due to critical vulnerabilities like arbitrary read and RCE.
Signal introduces automatic key verification, a feature built on key transparency that provides a streamlined way to confirm there is no unexpected party in an end-to-end encrypted session, complementing the existing safety number system.
DHS is seeking access to protesters' Signal group chats as part of a lawsuit, raising First Amendment and privacy concerns over government surveillance of encrypted communications.
Signal now lets users link multiple Android phones and iPhones to a single account, with optional encrypted message history transfer, rolling out in version 8.20 on Android and 8.22 on iOS.
Chamath discovered that changes in buzzword frequency in SEC filings can predict when a trend is about to wane. For instance, DEI peaked from 2020 to 2022 and then declined, while AI has been rising since late 2022 and is now mentioned in nearly every major company's filings.
A third party breached The Intercept's Signal tip line and impersonated the publication to solicit whistleblowers, putting sources at risk. The Intercept has since switched to a new Signal account but has not disclosed full details of the breach.
US authorities offer up to $10 million for information on Russian state cyber groups responsible for hacking thousands of Signal and WhatsApp accounts belonging to journalists and government employees.
The FCC is accused of hiding Chairman Brendan Carr's messages with DOGE and Elon Musk, including Signal communications, in a FOIA lawsuit.
Signal President Meredith Whittaker warns that AI chatbots like ChatGPT and Claude are not sentient friends, and granting them pervasive access across apps and services would create a backdoor to privacy.
Signal publishes a statement opposing the UK's latest surveillance proposals, arguing that surveillance undermines safety and privacy.
Apple patched an iOS bug that let law enforcement extract deleted Signal messages via cached notifications retained up to a month, after 404 Media revealed the FBI had exploited it.