• Kairos@lemmy.today
        link
        fedilink
        arrow-up
        2
        arrow-down
        4
        ·
        6 hours ago

        Signal does not know who talks to whom. It’s kind of the main thing about the double ratchet.

        • davel [he/him]@lemmy.ml
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          2
          ·
          4 hours ago

          Unless you compiled the app yourself from source code that you understand, you don’t really know what the app might be saying to Signal’s servers. Almost everyone just trusts that the pre-compiled app supplied by Apple or Google aren’t compromised. But we know from history that Big Tech and the military-intelligence-industrial complex are in bed with each other.

                • ☆ Yσɠƚԋσʂ ☆@lemmy.mlOP
                  link
                  fedilink
                  arrow-up
                  4
                  arrow-down
                  1
                  ·
                  3 hours ago

                  That’s nonsense, because many different people read the source and audit open source software. While it’s certainly possible to sneak malicious code in, the trust doesn’t depend on each single individual auditing it. It’s a collective effort.