News for hackers. Stuff that matters.
Re:Signal app downloads spike as US protesters seek message ... by jwr on Friday June 05, 2020 @06:21AM (#23426937)
Not the full contact list, just hashes.

That was exactly my point: few people know about this.

Re:Signal app downloads spike as US protesters seek message ... by est31 on Friday June 05, 2020 @06:28AM (#23426991)
A hash of the phone number is as good as the phone number itself. Given a list of all phone numbers in use, it's trivial to build a rainbow table for them. And many you can also brute-force.
Re:Signal app downloads spike as US protesters seek message ... by CultOfSkaro on Sunday June 07, 2020 @06:11PM (#23451346)
Actually Signal is uploading contacts with their first and lastname to the cloud now. Or is planning to do so. Read their blog about that f-ing PIN feature. Its explained there. I hope they don’t go through with it, I absolutely do not wish to use some cloud; not even Signal’s. My data should be 100% local. And that they’re gonna push this without a back-up feature for iOS feels a bit like them raising their middle finger to us.