52
Why do criminals use their own encrypted messaging platforms, instead of using any of the recommended apps?
(www.europol.europa.eu)
this post was submitted on 03 Dec 2024
52 points (98.1% liked)
Privacy
3424 readers
86 users here now
Icon base by Lorc under CC BY 3.0 with modifications to add a gradient
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
You're missing the #1 reason organized criminals prefer their own service. To have trusted staff who control everything — the servers, code development & deployment — whom can't be ordered by a court to shut off access to individuals at any time, or provide metadata, eavesdrop, etc.
The weakest link with legal services like Signal is that they can be compelled by law enforcement, the judicial system, and government... That's an enormous risk for any organized crime operation. Even a minimal amount of metadata collection can do a lot of damage, especially if it's analyzed over months/years, and especially when performed by an advanced persistent threat actor like a nation state.
Theoretically signal only has your phone number and time of sign up which means theoretically it shouldn't matter if the legal system asks them for information.
... theoretically. In practice if the NSA used a secret court order that banned them from talking about it and made them update the app to reveal plaintext for one particular person, I don't see how they could get out of that (other than by breaking the law and risking jail).
I think the chances of that are very small though.
There is legislation in Australia that allows precicely this. Then 5 eyes or Interpol or whatever for everyone else.
...that's a terrifying but also plausible prospect. Guess it's a reason not to use the published app and instead build it yourself.
Yea and if a nation-state knows your phone number, they can track your exact whereabouts in real-time. Let's not pretend like we know better than them about what information matters :)
...yeah and if they went to signal to ask about you they're going to provide signal your phone number as it's the only identifier they have in their system...so the nation state already had that to begin with, it isn't sensitive info despite what it can be used for.