[ndiscussion]

It's been like this for a while, and the project owner's attitude is pretty negative overall. I do use signal daily, but I believe it's likely compromised ala lavabit.

[gruez]

I thought they were never compromised? They shut down rather than comply with the order

>The service suspended its operations on August 8, 2013 after the U.S. Federal Government ordered it to turn over its Secure Sockets Layer (SSL) private keys, in order to allow the government to spy on Edward Snowden's email

[ndiscussion]

Lavabit was never compromised, I'm saying that Signal may have been compromised by the feds, instead of choosing to shut down. Feds may have learned their lesson and not provided an option this time.

[coolspot]

Add easily-bruteforceable PIN-codes forced on users, protected only by vulnerable Intel SGX.

Add requirement of a phone number to create an account.

[rOOb85]

That's a bold claim with 0 data to back that up. What are your sources for believing it's received a love letter?

[morelisp]

What's in the Signal server to be compromised?

[corty]

List of phone numbers? Pairs of communication partners? Timing and size of messages? Metadata about transferred media? There is still a lot, sufficient for targeting a drone strike as the usual wisdom goes.

[ndiscussion]

If you use the Signal app from the app stores, and communicate with the server, you are using 100% closed source software.

They could easily add a backdoor in the client despite the fact that it's "open source", because no one builds it from source.