twonly.euThis week, I started working on my master’s thesis.
The overall goal is to increase trust between users in order to better protect against phishing [0], user errors (e.g., SignalGate [1]), or a potential active MITM attack [2].
With this established trust, features such as decentralized user discovery or account recovery can then be offered without requiring a phone number.
[0]: https://osurl.de/cn7k
[1]: https://osurl.de/cdih
[2]: https://signal.org/docs/specifications/x3dh/ (4.1. Authentication)
Phishing attack: Numerous journalists targeted in attack via Signal Messenger
In a phishing attack, unknown actors are apparently attempting to gain access to accounts of journalists and activists on the Signal messaging service. We explain how the attack works and how you can protect yourself against it.