<![CDATA[A response to recent reporting in Germany, in service of clarity and accountability:]]>A response to recent reporting in Germany, in service of clarity and accountability:

First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, and the integrity of the app’s code was not compromised. 1/

]]>https://forum.fedi.dk/topic/09002056-859a-4d47-a48a-94be83684d83/a-response-to-recent-reporting-in-germany-in-service-of-clarity-and-accountabilityRSS for NodeFri, 01 May 2026 02:09:15 GMTMon, 27 Apr 2026 20:54:50 GMT60<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:53:57 GMT]]>@expertenkommision_cyberunfall @signalapp

You can make stuff auditable by having the conversations in a group chat that includes an "audit department" account. I think the US govt even has a forked version of the Signal client app that does something like this automatically.

]]>https://forum.fedi.dk/post/https://mas.to/users/only_ohm/statuses/116482194643853898https://forum.fedi.dk/post/https://mas.to/users/only_ohm/statuses/116482194643853898Tue, 28 Apr 2026 11:53:57 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:53:26 GMT]]>@skaphle
'Reasonable air of legitimity' is still going to be worse than 'Signal Support' and that would mean less people would be susceptible to these phishing attacks. I imagine it doesn't have to work perfectly to have less people be susceptible.
@expertenkommision_cyberunfall @signalapp

]]>https://forum.fedi.dk/post/https://mastodon.social/users/tnhd/statuses/116482192603024151https://forum.fedi.dk/post/https://mastodon.social/users/tnhd/statuses/116482192603024151Tue, 28 Apr 2026 11:53:26 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:50:03 GMT]]>@signalapp @yetzt @energisch_

I *think* Signal's privacy guarantee implies Signal LLC not knowing users' display names, so they'd have no way of filtering them.

]]>https://forum.fedi.dk/post/https://mas.to/users/only_ohm/statuses/116482179268821348https://forum.fedi.dk/post/https://mas.to/users/only_ohm/statuses/116482179268821348Tue, 28 Apr 2026 11:50:03 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:44:29 GMT]]>@gsc You are privileged to have choices to switch to. I feel like I've already chosen the least bad options in my situation. I don't know where you live, but in many countries most banks have terrible security practices. @EarthOrgUK @jtb @ahltorp @davep @signalapp

]]>https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116482157430624782https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116482157430624782Tue, 28 Apr 2026 11:44:29 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:37:56 GMT]]>@stagerabbit @EarthOrgUK @jtb @ahltorp @davep @signalapp If i go to a store and get repeatedly scammed, i don't go there again. If a bank does not handle security in a proper way, I'd leave that bank(I've done that in the past). I don't get how you can stick to your bank, if you believe their security is weak. It's their core competence after all...

]]>https://forum.fedi.dk/post/https://mathstodon.xyz/users/gsc/statuses/116482131687383243https://forum.fedi.dk/post/https://mathstodon.xyz/users/gsc/statuses/116482131687383243Tue, 28 Apr 2026 11:37:56 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 11:10:35 GMT]]>@ahltorp @davep You're lucky in Japan if your bank even has it and then doesn't charge you 2500 yen a month to use it.

]]>https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116482024135639159https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116482024135639159Tue, 28 Apr 2026 11:10:35 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:49:46 GMT]]>@stagerabbit @davep I think most of the banks in Sweden are at least ok in this regard. I’ve had online banking for 30 years (pre internet), and it has always been two-factor. In the beginning only pin and single-use codes, but very quickly it became smartcard-based challenge-response with pin unlock of the smartcard, so theoretically very secure.

I’ve only done hanko based banking in Japan, so I’ve never seen online banking in Japan, but that seems horrible.

]]>https://forum.fedi.dk/post/https://mastodon.nu/users/ahltorp/statuses/116481942250834737https://forum.fedi.dk/post/https://mastodon.nu/users/ahltorp/statuses/116481942250834737Tue, 28 Apr 2026 10:49:46 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:21:20 GMT]]>@tnhd @expertenkommision_cyberunfall @signalapp "such names" is quite complicated. Is it a list? A regular expression pattern? Machine-learning? I have a whack-a-mole image in my mind when I think about it. It's a bit like spam filters in general. And in the end the scammers can just try different profile names and pictures until the filter lets it pass and it still has a reasonable air of legitimity. I'm quite skeptical that it's worth the effort.

]]>https://forum.fedi.dk/post/https://social.tchncs.de/users/skaphle/statuses/116481830443496453https://forum.fedi.dk/post/https://social.tchncs.de/users/skaphle/statuses/116481830443496453Tue, 28 Apr 2026 10:21:20 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:16:30 GMT]]>Weil es genügend Leute gibt, die nicht (so gut) englisch sprechen/lesen und man denen mit einer deutschen, offiziellen Mitteilung die Sachlage eher nahebringen kann.

@jabgoe2089

]]>https://forum.fedi.dk/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481811447075038https://forum.fedi.dk/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481811447075038Tue, 28 Apr 2026 10:16:30 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:13:50 GMT]]>L⌐ "SpätzleGrab™",8,1 WHY SHOULD THERE BE?]]>https://forum.fedi.dk/post/https://hub.netzgemeinde.eu/item/57a71298-5d4c-41bf-8319-b8d30776f8d0https://forum.fedi.dk/post/https://hub.netzgemeinde.eu/item/57a71298-5d4c-41bf-8319-b8d30776f8d0Tue, 28 Apr 2026 10:13:50 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:13:14 GMT]]>@ax11 @signalapp My comment was more directed towards @Chantology and @olliausstuhr who joked about the technical incompetence of the government, somewhat smugly, or so I read it.

]]>https://forum.fedi.dk/post/https://social.tchncs.de/users/skaphle/statuses/116481798627256852https://forum.fedi.dk/post/https://social.tchncs.de/users/skaphle/statuses/116481798627256852Tue, 28 Apr 2026 10:13:14 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 10:06:34 GMT]]>@signalapp
If you want to do everything you can to help people avoid and detect Signal Support scams, then please stop disguising your Signal communication and advertisment among my Signal Chats, like in my screenshot I attach here.

]]>https://forum.fedi.dk/post/https://mamot.fr/users/xdej/statuses/116481772384996634https://forum.fedi.dk/post/https://mamot.fr/users/xdej/statuses/116481772384996634Tue, 28 Apr 2026 10:06:34 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:59:55 GMT]]>Is there any OFFICIAL statement in GERMAN?

@signalapp

]]>https://forum.fedi.dk/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481746239764397https://forum.fedi.dk/post/https://mastodon.bayern/users/SpaetzleGrab/statuses/116481746239764397Tue, 28 Apr 2026 09:59:55 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:52:53 GMT]]>@stagerabbit @EarthOrgUK @jtb @ahltorp @signalapp
At least I had to physically go to my local post office to activate my digital identity here in France.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/davep/statuses/116481718605493320https://forum.fedi.dk/post/https://infosec.exchange/users/davep/statuses/116481718605493320Tue, 28 Apr 2026 09:52:53 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:51:00 GMT]]>@davep @EarthOrgUK @jtb @ahltorp @signalapp We're talking about the sector that holds our life savings and limits passwords to 8-12 alpha numeric characters and until recently no form of 2FA. Not sure why this surprises you. (If this isn't the case elsewhere, it's still the case in Japan, where I live. Not super impressed by my Canadian banks either, tbh.)

]]>https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116481711196713959https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116481711196713959Tue, 28 Apr 2026 09:51:00 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:47:29 GMT]]>@stagerabbit @EarthOrgUK @jtb @ahltorp @signalapp
That is awful practice.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/davep/statuses/116481697379287217https://forum.fedi.dk/post/https://infosec.exchange/users/davep/statuses/116481697379287217Tue, 28 Apr 2026 09:47:29 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:46:08 GMT]]>@jtb @stagerabbit @ahltorp @davep @signalapp You still get those bona fide people on the phone who ask 'can you confirm your ...' (dob, account number, whatever), who then expect you to *give* them the detail for them to check. So it's not surprising that people can be tricked into 'confirming' online.

]]>https://forum.fedi.dk/post/https://toot.wales/users/iestynap/statuses/116481692029869396https://forum.fedi.dk/post/https://toot.wales/users/iestynap/statuses/116481692029869396Tue, 28 Apr 2026 09:46:08 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:42:56 GMT]]>@chisop @MFennVT @signalapp to avoid pop-up box

]]>https://forum.fedi.dk/post/https://mastodon.social/users/GOKUSHRM/statuses/116481679436179014https://forum.fedi.dk/post/https://mastodon.social/users/GOKUSHRM/statuses/116481679436179014Tue, 28 Apr 2026 09:42:56 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:40:51 GMT]]>@signalapp what about a "government mode" which needs a second account to be involved to do these things.
Of course it needs to be set up, which is then not done by politicians because too cumbersome.

]]>https://forum.fedi.dk/post/https://mastodon.opencloud.lu/users/gunstick/statuses/116481671297305262https://forum.fedi.dk/post/https://mastodon.opencloud.lu/users/gunstick/statuses/116481671297305262Tue, 28 Apr 2026 09:40:51 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:38:53 GMT]]>@GOKUSHRM @MFennVT @signalapp why would you want to do that?

]]>https://forum.fedi.dk/post/https://todon.eu/users/chisop/statuses/116481663520371583https://forum.fedi.dk/post/https://todon.eu/users/chisop/statuses/116481663520371583Tue, 28 Apr 2026 09:38:53 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:35:20 GMT]]>@EarthOrgUK @jtb @ahltorp @davep @signalapp And they've locked my account for KYC reasons until I do it. Damned if you do, damned if you don't.

]]>https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116481649555777440https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116481649555777440Tue, 28 Apr 2026 09:35:20 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 09:34:28 GMT]]>@EarthOrgUK @jtb @ahltorp @davep @signalapp Both my life insurance company and my overseas bank want me to send copies of my passport and proof of address over unencrypted email. When I complain, they say I should password protect the file and send the password in a separate unencrypted email to the same address.

Even if I find a way to send it securely, based on this, I doubt they store it securely.

]]>https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116481646196469982https://forum.fedi.dk/post/https://famichiki.jp/users/stagerabbit/statuses/116481646196469982Tue, 28 Apr 2026 09:34:28 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 08:50:15 GMT]]>@yetzt rather automatically Block any accountname with Signal & Support in it?
@signalapp

]]>https://forum.fedi.dk/post/https://troet.cafe/users/energisch_/statuses/116481472328660545https://forum.fedi.dk/post/https://troet.cafe/users/energisch_/statuses/116481472328660545Tue, 28 Apr 2026 08:50:15 GMT<![CDATA[Reply to A response to recent reporting in Germany, in service of clarity and accountability: on Tue, 28 Apr 2026 08:28:08 GMT]]>@c998a573]]>https://forum.fedi.dk/post/https://mostr.pub/objects/5ab4c8f30e2aa3986c5b5fec5cce711aced1419ad7a123a7b003ed21065b16f8https://forum.fedi.dk/post/https://mostr.pub/objects/5ab4c8f30e2aa3986c5b5fec5cce711aced1419ad7a123a7b003ed21065b16f8Tue, 28 Apr 2026 08:28:08 GMT