If you use Signal, Discord, or any other messaging app and you DON'T want Google or Apple monitoring/reading/learning from your messages, follow these steps.

Android:
1. Open Google app
2. Tap your profile photo
3. Settings
4. Google Assistant
5. "Your Apps"
6. Choose the app (e.g., Signal)
7. Toggle "Let your assistant learn from this app" off

iPhone:
1. Settings
2. Apps
3. Choose the app (e.g., Signal)
4. Toggle Apple intelligence or Siri settings to off (“learn from this app”)

Note that your Android instructions may differ depending on your model. Those worked for my Pixel, but please feel free to chime in with directions for other models.
@EnfysBook
And remember to check those settings after every update as things tends to change.

@kaaswe @EnfysBook Ok, silly question. Since Google will likely just "oopsy-daisy" silently re-enable this AI oversight of apps like Signal in future Android updates, doesn't that really compromise Signal's integrity as a "private" app?

How "private" is an app like Signal really, considering it's default shoulder-surfed by Google's AI on ~95% of all Android phones, where the normies of the world *aren't* doing the locking-down (attempting to retain privacy - but isn't the horse already out the barn by that point?), as suggested in the OP?

#infosec #signal #android #google #privacy

@sbb

On stock #Android NOTHING is private.
Use a decent #CustomROM and you're fine.

@kaaswe @EnfysBook
#privacy #google

@sbb @EnfysBook
It’s not really something Signal can control, as you say it’s the OS. You have the same problem on iPhone too, or running Signal on your computer.

In this case I’d say for now, iPhone is more secure in concern for privacy if you disable Siri, tomorrow this could change.

On a computer. Run Linux. Don’t use windows.

@sbb @kaaswe @EnfysBook I imagine that Signal's messages being ALWAYS e2ee should prevent it, it's not lioke telegram and other messaging apps that have encryption off by default

@Devourer_ITA @sbb @kaaswe @EnfysBook Not necessarily. The Google assistant is accessing it on the end-client, where it gets decrypted. After all, it's "end-2-end" encryption, not "always encrypted". Else you wouldn't be able to read the messages yourself either.

If you can open it there, the OS itself can technically too. Be it officially intended that way or by some sneaky methods behind your back. So if you wanna be safe you need to ensure you can trust the OS not too.

@sbb @kaaswe @EnfysBook This is a point Naomi Wu has been making for years: any app like Signal is only as good as it's runtime environment. In HK and China a real problem is people installing third party keyboards onto their devices which leak data to the government. Better use education of these risks within #Signal would be valuable even if that's hard to do.

@nygren @kaaswe @EnfysBook I agree with you and Wu here. It's just that it dawns on me that there is little incentive to advocate #Signal any longer, as any alternative to say, #WhatsApp.

If you use #WhatsApp, #Meta spies on you. If you use #Signal, guess what, #Google/Alphabet or #Apple are the ones spying on you instead (with a small minority of users opting out - that is until an "oopsie daisy" re-enablement undoes this opt-out as mentioned).

What privacy advantage does Signal _really_ have any longer, when such privacy loss afflicts both these apps - one big corp doing it or another?

@sbb @nygren @kaaswe @EnfysBook At least it stops Meta spying on you directly.

@sbb @nygren @EnfysBook

Signal still has very much high value compared to say WhatsApp, because Signal is outside US, so the privacy for your account is much better.

Edit: This information is not correct. Signal is a US based company.

@kaaswe @sbb @nygren @EnfysBook Signal is not "outside US." The Signal Foundation is a US 501c3 nonprofit. The founders/CEO and board of directors are all US-based. And it is hosted on US-owned cloud computing platforms (e.g. AWS).

@mbrubeck @sbb @nygren @EnfysBook
Yes you are correct.

I'm sorry I don't know where I got that from.

@sbb @nygren @kaaswe @EnfysBook WhatsApp also lets the assistant access itself tho, so that one is double tracked (by both Google and Meta). So using Signal is still one big tracker less, and every bit counts when it comes to privacy & security.

But other than that. Signal itself is not unsafe, the OS is. The only solution for that is using a different OS. Signal is good privacy-wise, Android/iOS is not.

@sbb @kaaswe @EnfysBook Signal is great and I strongly support using it over others. But it's critical to understand your threat model and respond holistically. There's lots of really bad security advice going around right now, as always. No one solution will be appropriate for every situation. Sometimes the best solution is to keep things off electronic devices entirely.