Conversation

Notices

1. feld (feld@friedcheese.us)'s status on Thursday, 20-Feb-2025 14:03:18 JST feld

   in reply to

   • feld
   Also from what I'm reading the Signal server is expected to tell you that a new device was linked.
   
   Delta's informs you from your own device when you do it. No server required.
   • LS likes this.
   • Angry Sun (sun@shitposter.world)'s status on Thursday, 20-Feb-2025 14:03:18 JST Angry Sun

     in reply to
     @feld I never actually understood, if you don't trust Twitter, how do you prevent Twitter from just intercepting your URL/QRCode and then mitm'ing your messages because the thing you're provided doesn't tell you in any way who you're contacting or how to verify it
     LS likes this.
   • feld (feld@friedcheese.us)'s status on Thursday, 20-Feb-2025 14:03:19 JST feld
     > [...] threat actors have resorted to crafting malicious QR codes that, when scanned, will link a victim's account to an actor-controlled Signal instance. If successful, future messages will be delivered synchronously to both the victim and the threat actor in real-time, [...]
     
     
     Haha wow so if I understand this correctly the multi device setup method for Signal is significantly worse than Delta Chat's which requires the device you're linking be on the same local network