this post was submitted on 09 Nov 2023
270 points (100.0% liked)
Technology
37719 readers
110 users here now
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
More spam messages then, ok...
While Signal did justify the need for numbers by cutting spam prevention I don't get it...
Spammers use fake phone numbers all the time on the regular phone service so why not on Signal? A few steps too many for them to bother registering?
A few possible answers:
A tip (but you do you, of course), use something federated (XMPP!): the time for trusting a central organization to do no harm is over if you have kept tabs of anything internet over the last 40 years or so..
The phone calls just use fake caller ID. Caller ID is entirely unauthenticated and the recipient just blindly trusts the sender, so scammers use sketchy VoIP services that let you override the caller ID without actually proving you own that number. Work is being done to improve this: https://www.fcc.gov/call-authentication
That's means it's trivial to use a fake number for outgoing calls, but the spammers can't actually receive incoming calls or texts to those numbers.
You still need phone number verification to create an account, that hasn't changed
So on the privacy front nothing has either. Good to know.
Weirdly, I got a spam message yesterday on Signal. No number - just a username.
I'm on the regular production version - not the one testing usernames.