News for hackers. Stuff that matters.

A comment on A Formal Security Analysis of the Signal Messaging Protocol. Parent comment

Re:A Formal Security Analysis of the Signal Messaging Protocol by MrMullen on Tuesday November 08, 2016 @12:42PM (#12902270)
> Plus, getting a copy of all your contacts is and invasion of privacy for an app that is advocating for privacy and security.

You really need to do research into this before making this claim. The phone numbers are hashed (Or something like it) before being sent to the Signal servers.

[ Parent | on HN ]
Re:A Formal Security Analysis of the Signal Messaging Protocol by haffenloher on Tuesday November 08, 2016 @01:46PM (#12902829)
Unfortunately, hashing provides no meaningful protection here. The preimage space (i.e. the set of all possible phone numbers) is just too small. See https://whispersystems.org/blog/contact-discovery/
[ Parent | on HN ]