We also believe it is imperative to build alternatives to the current tech ecosystem & its reliance on surveillance. And building these alternatives requires understanding the political economy of the industry, so we don’t mistake an elegant idea for a realistic possibility.

If you rely on Signal, if you believe in what we’re doing, or if you want to support tech done differently, please donate to support our work.

https://signal.org/donate/

UPDATE: According to Signal there is no 0-day vulnerability:

"After responsible investigation *we have no evidence that suggests this vulnerability is real* nor has any additional info been shared via our official reporting channels."
source: https://nitter.net/signalapp/status/1713789255359619171

-- Original message follows --

Okay the cat is out of the bag: Signal app is said to have 0day in "Generate Link Previews" feature. Disable this feature until the fix is available. #0day #signalapp #vulnerability #infosec

Also, any serious discussion of election security has to grapple with two simultaneous realities:

- there's no evidence that any US election outcome has ever been altered by hacking

- there are real, exploitable vulnerabilities in many parts of our election infrastructure

I've written a bit on what these vulnerabilities are and how to fix them, See, e.g., this brief article:
https://georgetownlawtechreview.org/wp-content/uploads/2020/07/4.2-p505-522-Blaze.pdf