You can always look at their history "complying" to government orders to hand over user data.
https://signal.org/bigbrother/
No company is going to break the law for you, so live tests seem about as good as a security audit.
this post was submitted on 13 Mar 2025
18 points (78.1% liked)
Privacy
2115 readers
183 users here now
Welcome! This is a community for all those who are interested in protecting their privacy.
Rules
PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!
- Be civil and no prejudice
- Don't promote big-tech software
- No reposting of news that was already posted
- No crypto, blockchain, NFTs
- No Xitter links (if absolutely necessary, use xcancel)
Related communities:
Some of these are only vaguely related, but great communities.
founded 5 months ago
MODERATORS
You can always look at their history “complying” to government orders to hand over user data.
IIRC by US law they are not allowed to disclose requests from US gov itself
so live tests seem about as good as a security audit.
I would rather prefer real security audits
A security audit would be great, but their most recent request was from Santa Clara county, and several previous ones are also from US jurisdictions. You can read about the content of what they were able to provide to the courts.
They're obviously private. And if you're concerned about the app, use the fork Molly.
I guess I don't see what more a security audit would reveal that we couldn't deduce by examining the code or real-life examples.
I would also prefer a server in a jurisdiction that I choose as suitable for my needs. Or, better, a mini-computer on my balcony.
I only talk quietly in loud rooms, can’t trust Signal.
Signal is a little sus. We should be applying pressure for them to allow federation. They don't wanna remove the phone number requirement cos spam sure let everyone else we handle that u keep doing your thing with phone numbers and allow us to do ours and still communicate.
That is kind of naive.
"Allow federation" it's not a simpke switch, it's probably a full project of it's own, and if they only hace X resources for development, taking on a big project like federation might just not be a priority.
yet the reason that "Signal is expensive" https://signal.org/blog/signal-is-expensive/ is because they didn't go for a federated approach, they spend more money just to keep the servers running than resources spent on development
Not to mention the SMS bills