Richi JenningsMay 22, 2025

Privacy-first messenger blocks #MicrosoftRecall

#Recall, #Microsoft’s “magical” AI tool that watches everything you do, is back. But the team behind private messaging app #Signal aren’t happy about it—they’ve added a feature to stop Recall taking screenshots of your chats.

As you might recall, Recall was initially dubbed a “#privacy disaster,” before being “delayed indefinitely.” But Microsoft tweaked and relaunched it. And in #SBBlogwatch, people aren’t entirely happy about that.

@TheFuturumGroup @TechstrongGroup @SecurityBlvd: https://securityboulevard.com/2025/05/signal-recall-drm-richixbw/?utm_source=richisoc&utm_medium=social&utm_content=richisoc&utm_campaign=richisoc

Signal Gives Microsoft a Clear Signal: Do NOT Recall This

Black screen of DRM: Privacy-first messenger blocks Microsoft Recall

Security Boulevard
Show threadKevin Karhan May 22, 2025
@richi Except @signalapp is not "#Privacy-first" cuz if #Signal did, they'd not.demand #PII (#PhoneNumber) nor remain in the #USA (#CloudAct) nor peddle #Shitcoin-#Scams (#MobileCoin) and put their tech on @torproject / #Tor and fully #decentralized.with 100% #SelfCustody of all the keys!
Show threadsilhouette   
@kkarhan @richi @signalapp @torproject
>PII
afaik the only info is that you have registered to Signal and the last time you've connected. Other services do this too, for technical reasons.
>USA
irrelevant given the guarantees of their E2EE
>Mobile coin
irrelevant
>TOR
adds unnecessary dependencies to a network of questionable integrity
>self-custody of the keys
That's how you get PGP.
May 23, 2025 at 11:54amWeb
Show threadKevin Karhan May 23, 2025

@silhouette @richi @signalapp @torproject

1. You completely miss the points! There is no "#TechnicalNecessity" to demand #PII like a #PhoneNumber - espechally for a "#privacy"-focussed messenger!

2. & 3. #Signal is able and willing to comply with #Cyberfacism and pushing a #Shitcoin (#MobileCoin) makes it trivial to criminalize the App for "illegal & unregilated banking". If #Moxie or @Mer__edith cared they'd yeet that thing (or didn't even integrate it to begin with!) to avoid the attention. And yes Signal does restrict the App functionality when using a phone number from #Russia & #Iran (among other nations), thus affecting not only those in need of safe comms but by sending a verification code to them, earmarking them for police & intelligence. Which bings.me to the 1st agrument.

4. #Tor has a stellar record in terms of stability, integrity and censorship circumvention. DIY'ing something instead if following almost two decades of solid progress is absurd and violates "don't roll your own crypto" as a rule!

5. Only with #SelfCustody can you protect your own data. Or do you really expect Staff from Signal to not talk when facing lifetime in jail? If they have the keys, they can decrypt it, thus their #E2EE is just a "#TrustMeBro!" concept. I mean, what prevents them from being forced into backdooring all comms to @icij as per #NSL? Any "guarantee" without self-custody is worthless by virtue of being unenforceable!

Signal pushing #TechPopulism instead of teaching folks that their #ComSec is worth diddly-piss wothout.#OpSec, #InfoSec & #ITsec is dangerous!

  • And yes claiming "JuSt UsE sIgNaL!" is dangerous in the era of #Trump's #cyberfacist regime acting as it does (like with the #ICC)!

Not to mention there are better options that don't do that shite (i.e. demand PII) and just work. @monocles / #monoclesChat & @delta / #deltaChat for example can adapt way better to said risks and ain't run by a #VCmoneyBurningParty!

Post by sleepy silhouette, @[email protected]

@[email protected] @[email protected] @[email protected] @[email protected] >PII afaik the only info is that you have registered to Signal and the last time you've connected. Other services do this too, for technical reasons. >USA irrelevant given the guarantees of their E2...

dumbfuckingweb.site