@signalapp Signal IMO has bad security because when someone decides they are not interested in an overpriced, underperforming service of "phone number" and stops using their SIM, they cannot deregister the number from Signal and the new owner of the number either can hijack their Signal account, or people may be blocked from using newly purchased SIMs with Signal.

Also, authoritarian regimes IMO can temporarily transfer a number into a provider's internal SIM in order to hijack a Signal account and impersonate a dissident against another dissident, facilitating abduction, torture and murder.

I feel

c o n t e m p t

towards Signal when it is designed this way.

#badsecurity #incompetence #signal #phonenumberasidentity #security #SIM #contempt #securityhole #securityflaw #attack #hijacking #torture #murder #abduction #authoritarianism #regime #authoritarian

I'm not a hacker of any kind, but I was able to use native tools in Chrome to remove the "security measures" in place so I could remove the disabled copy/paste.

But then I get my account created and I get logged in and then I find that the site doesn't have 2 Factor Authentication as an option for actual security?

So.. I just thought I would share that experience.

#NotAHacker #BadSecurity

And it gets worse....
You can't paste a password.... Seriously?

#Broadcom #BadUX #BadSecurity #FuckPasswordManagersRight?

Also just the startling causality of so many things. I’ve been sitting outside this one empty manager’s office for 10 minutes and there’s separate people have gone in, sorted through papers on the desk, pick one up and walk out.

There’s just piles of papers, probably containing a fair amount of PII, just sitting there in plain sight and no one to oversee who sees or takes it.

#BadSecurity #OpSec