this post was submitted on 02 Mar 2025
37 points (100.0% liked)

The Signal messenger and protocol.

1916 readers
1 users here now

https://signal.org/

founded 4 years ago
MODERATORS
 
top 6 comments
sorted by: hot top controversial new old
[–] [email protected] 6 points 1 month ago (1 children)

Do you have any linked devices, especially ones using Molly?

I wouldn't sweat the username thing too much, as they are not meant to stick around forever by design. Better they break than get compromised.

[–] [email protected] 2 points 1 month ago (1 children)

Desktop signal yes.

Doesn't having them expire/get reused open them up to impersonation attacks?

[–] [email protected] 3 points 1 month ago (1 children)

It could, but that's why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.

I'm not sure if Signal mitigates username impersonation in some way though.

[–] [email protected] 2 points 1 month ago

Hopefully by "taken" it means that it is in some kind of cooldown before it can be used again.

[–] [email protected] 5 points 1 month ago (1 children)

Signal has usernames? Huh. When did that happen?

[–] [email protected] 5 points 1 month ago

A year or so ago? I think its part of their transition away from phone numbers?

https://signal.org/blog/phone-number-privacy-usernames/