Post

👻Spooky Costanza-Chock
@schock.cc

There's predictably lots of disinformation circulating about @signal.org. Don't fall for it. 1. NSA didn't find a security vulnerability in Signal's code. They warned staff Signal is 'vulnerable' to phishing. Any publicly available app is 'vulnerable' to phishing. So NSA has internal channels.

👻Spooky Costanza-Chock
@schock.cc

3. There IS important recent information that Signal is an increasingly high value target for phishing schemes, including the use of fake QR codes for Signal group invites that link the targeted phone to an attacker's device: cloud.google.com/blog/topics/... So, be careful w/ those invites, kids!

cloud.google.comSignals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger | Google Cloud BlogRussia state-aligned threat actors target Signal Messenger accounts used by individuals of interest to Russia's intelligence services.

5 reposts22 likes

👻Spooky Costanza-Chock
@schock.cc

5. US government military and intelligence staff shouldn't be using Signal to discuss war plans and then auto delete their conversations because A. It's illegal; they have specific approved comms channels B. It's illegal; they are required to keep records

👻Spooky Costanza-Chock
@schock.cc

6. THEY shouldn't use Signal, not because it's insecure or has known code vulns, but b/c it's illegal for them (see above). YOU should use Signal, unless it's illegal for you to do so. It's the most secure messaging app available (beyond closed loop military networks & such; not available to us).