cross-posted from : https://lemmy.zip/post/71321898
Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance
I want a version of Signal that doesn’t allow linked devices. Linking devices is a clear vulnerability.
Im going to go out on a limb here and suggest something that should be obvious - you don’t have to link devices
But “Law enforcement” can do it by spoofing sms. I want one account, one device.
Signal does not use SMS.
The vulnerability they call out in the article is a phishing attack. A phishing attack requires the user’s input. There is no defense, no security, no techniques or technology to prevent you from handing the key to your safe to someone else.