News for hackers. Stuff that matters.
Re:Twilio incident: What Signal users need to know by lrvick on Monday August 15, 2022 @03:53PM (#32474533)
You can not buy a sim without KYC in almost all countries. Also most users will not realize these consequences and will just assume the defaults on Signal protect them with their every day phone number and SIM.

Also facebook/instagram/whatsapp/telegram/etc are not trying to advertise themselves for the high risk use cases Signal is actively promoted for. I obviously do not recommend anyone use those either, regardless.

Matrix is all I suggest for most people.

Re:Twilio incident: What Signal users need to know by pseudo0 on Monday August 15, 2022 @04:06PM (#32474711)
> You can not buy a sim without KYC in almost all countries.

I'd be curious to see stats on this. At least in the US, it is very easy to buy a SIM and sign up for a pre-paid plan with zero KYC.

Re:Twilio incident: What Signal users need to know by lrvick on Monday August 15, 2022 @04:13PM (#32474785)
The US is actually the only exception I am aware of world wide which gives us a distorted view of this problem.
Re:Twilio incident: What Signal users need to know by pseudo0 on Monday August 15, 2022 @07:08PM (#32476730)
Unless things have changed in the last few years, there are apparently countries in Europe that don't require registration: https://www.reddit.com/r/europe/comments/9ziqfi/european_cou...

And that's a quite high regulation part of the world, I'd be surprised if South American or African countries were stricter.

Re:Twilio incident: What Signal users need to know by int_19h on Monday August 15, 2022 @08:48PM (#32477818)
Requiring SIM registration is nearly universal outside of Europe and NA.

https://www.comparitech.com/blog/vpn-privacy/sim-card-regist...

Re:Twilio incident: What Signal users need to know by pseudo0 on Monday August 15, 2022 @09:45PM (#32478306)
Great link, thanks. Interesting that my intuition was off, although I suppose it makes sense that regulations are loosest in countries with the strongest speech and privacy protections. Although I'm skeptical of how well the rules on paper are enforced in some of the countries listed as requiring registration. I have seen SIMs for sale at roadside stalls in a couple countries listed as requiring registration, and I don't think they were checking ID...

But it looks like the official answer is 36:

> Those without any SIM-card registration requirements are Bosnia and Herzegovina, Canada, Cabo Verde, Comoros, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Iceland, Ireland, Israel, Kiribati, Latvia, Liechtenstein, Lithuania, Maldives, Malta, Marshall Islands, Micronesia, Moldova, Namibia, the Netherlands, New Zealand, Nicaragua, the Philippines, Portugal, Romania, Serbia, Slovenia, Sweden, the United Kingdom, the United States, and Vanuatu.

Re:Twilio incident: What Signal users need to know by int_19h on Monday August 15, 2022 @10:18PM (#32478503)
In some places, the sale itself doesn't require anything, but you need to go to the provider and show an ID to activate.