Re:Looking back at how Signal works
by goatsi on Saturday June 06, 2020 @01:45AM
(#23437114)
Signal uses a registration pin to prevent that exact attack.
[ Parent
| on HN ]
Maybe I misread, but the GP doesn't seem to be talking about impersonating a user on Signal, but rather impersonating that user on other websites that depend on SMS 2FA sent to their phone number that is now visible through Signal.