News for hackers. Stuff that matters.
Re:Twilio incident: What Signal users need to know by sneak on Tuesday August 16, 2022 @12:03AM (#32479074)
The protobuf you linked does not support your claim that Signal uploads your contact lists. You'll note that AccountRecord does not contain a list of ContactRecords other than those pinned (4 max). Indeed the application UX does not either.

I've asked for evidence twice and you have supplied none.

Re:Twilio incident: What Signal users need to know by dvzk on Tuesday August 16, 2022 @06:16AM (#32481073)
protobuf files just contain data structure definitions. StorageService.proto contains only one reference to StorageRecord, but Signal actually syncs hundreds of StorageRecords.

Instead of linking to source code examples, which is easily misunderstood, here is Matthew Green's summary:

https://blog.cryptographyengineering.com/2020/07/10/a-few-th...

Alternatively, you can just open the app settings, which tells you that it will attempt to restore your contacts if you create a PIN:

> PINs keep information stored with Signal encrypted so only you can access it. Your profile, settings, and contacts will restore when you reinstall. You won’t need your PIN to open the app

Re:Twilio incident: What Signal users need to know by autoexec on Tuesday August 16, 2022 @12:13AM (#32479123)
Look pal, I've given you all the information you need. It's really all right there. I can lead you to data, but I can't make you think.

If you want to go on believing that someone at Signal has found a way to backup your contacts so that you can recover them when you use a new device that does not in any way involve Signal collecting your contacts and storing that data to push back down to you later be my guest. You believe in magic, and I'll continue to believe their own statements, code, and documentation.

Re:Twilio incident: What Signal users need to know by sneak on Tuesday August 16, 2022 @01:14AM (#32479428)
Signal does not recover my contacts on a new device.
Re:Twilio incident: What Signal users need to know by autoexec on Tuesday August 16, 2022 @02:42AM (#32479863)
> Signal does not recover my contacts on a new device.

Are you arguing that the feature to restore contacts doesn't exist or just stating that you can't make it work?