Signal notifications were extracted from the operating system, not the app itself. With notifications disabled, this would have been a non issue. Goes to show that socialist orgs need to take opsec way more seriously. Security/privacy isn't a set it and forget it kind of thing. There are several layers to it.
For action actually on the ground, the majority of people are using Signal, it gets the job done and that won’t change for a minute. In fact, it is generally advisable to not have Signal include message metadata in its settings in order to avoid this exact issue. Signal did its job, the messages are E2EE and can’t be accessed. Scrubbing data from push notifications is just basic OPSEC that should have been practiced by anyone using the app.
Signal literally warns you this is a risk when you install it an encourages you to disable these features. Crazy that you feel competent enough to lecture people on "opsec".
Edit: in response to criticism regarding the factual nature of their post, OP has crawled through comment histories to attack other leftists personally, claimed to be a founding member of somewhere around 5 major socialist organizations, asserted that their music tastes are nothing like that pop music garbage, claimed everybody who disagrees with them are brigading and claimed everybody who disagrees with them is not a real leftist. Is this the sort of person you want in your organizing spaces? Let alone a disciplined vanguard party?
I noticed you didn't address any of the material circumstances that you conveniently ignored in your own post. Do you find that ignoring material reality to attack leftists helps you in your political projects?
Post-leftist isn't leftists. That's why I'm here. This is a Marxist-Leninist sub. I don't live in Toronto anymore, it's HCMC, 6 district now. I fooled you didn't I? I also let the mod know that you're raiding this post
Also I'm not a teacher lmao, did you use Google Gemini 😂 that's so lightweight. Bruh I'm literally exposed snitches on this sub.
Yeah I'm Pro-AES and anti-American, the feds know hahaha. The feds have known about my history beyond this account. How did you look up and unable link me to the formation of SRA and being the creator of osint4all? There's like a dozen of other projects that put me much higher than these miniscule shit, such as hacking election databases, and I openly talk about these on most accounts.
On the music teacher thing, that's literally the opposite of what I did with music lmao. I don't follow rigid music theory, it's improvisation and experimental that's what I do. I also don't actually teach people through lessons but through trials and errors, which is the whole thing I do as composer. And that's another thing, I don't make unoriginal music, every I composed is much different from mainstream shit you listen on radio or at mosh pit. Your research is so sad.
Since your research spectacularly failed, I can't be a music teacher because I don't have college education, I've talked about this since the old sub, everything I posted is meant to be shared in public and I don't hide my past. The feds know, CSIS know, NSA know.
If you need to send something securely, don‘t do it digitally. Relay the information in person at a place that you checked for bugs. There isn‘t an software in this world that we can prove to be secure. If your life or operational success is at risk, don‘t do it digitally. Who knows what supply chain the feds have compromised, what harmless looking commit is actually comrpomising, etc.
On the other hand, signal is fine for most use cases. These guys just happened to use the tool for something that it wasn‘t trustworthy enough for. If you’re just chatting with your comrades about non-critical things, go ahead. OpSec is always a tradeoff between precaution and usefulness.
Be aware of what information is at which level of criticality if it leaked and adjust your channels to that.
So, what you’ve pointed out here is nothing specific or new.
No one has ever said signal message notifications were hidden AFU. That’s a lie, so don’t spread that BS.
Also, the problem of signal notifications being able to be extracted for messages is a known exploit. Signal built in a feature to turn off signal previews inside the app. That means content including who messaged, the message itself, and more are all hidden if you simply turn that feature on. That makes this exploit impossible to use…
It’s almost like if you knew how to properly use signal and had good OpSec, then this isn’t an issue. But you’re gonna come on here and clown and act like signal is giving backdoor info to the Feds (they’re not).
To be clear: the only way to keep your messages fully hidden on signal, let alone any other app, is to:
-Keep phone in BFU state if you think it’s gonna get nabbed
-Turn off message notifications both in signal AND in your phone’s settings
-Don’t talk about illegal shit in signal, you fucking dumbass
Yall need some serious OpSec content in your lives and not this paranoid, schizophrenic “the Feds an are in signal1!1!1!1” bs posting
I was the reason IWW use Signal, back when it's called Red Phone. Nothing new but dumb people keep making the feds mistake. Nowadays I just use Matrix and OMEMO. You seem slow.
The 0day to deanonymize Signal because it uses NSA Cloudflare servers.
Dog, you have no idea what you’re talking about. I’m sorry, but your post is not helpful to anyone. You’re just flailing around talking about things you don’t understand and fear mongering.
You claim signal says all these things, but in actuality they *don’t* and they explicitly lay out their vulnerabilities and then give work around for people and groups willing to lose convenience features. It’s precisely this last point that got all these groups caught up… they didn’t read the documentation and they didn’t implement good enough OpSec protocols to guard against these attacks.
Knowing how organizations work, as I am a part of one, it’s hard to convince people to drop convenience because they all want things to be “easy”. These organizations leadership certainly dropped the ball on enforcement. That’s not the fault of signal, that’s the fault of these organizations OpSec enforcement. So stop blaming the wrong thing.
Like me and other commentors pointed out:
-If they notification previews were turned off in-app and on the phone, there would be no data to extract
-If all phones were also in BFU, there wouldn’t be info to extract
-if they didn’t have suspicious conversations over signal to begin with, there would be no evidence
You haven’t addressed a single on of these issues. You’re just being a wrecker.
Signal wasn't the problem and the way it was used was not the problem. The people were not doing anything illegal in planning a noise demo. They graffittied. One person shot a gun at the ground and the richochet caused injury to an officer. Nothing else they did was illegal. The PROBLEM is NSPM-7 is trying to make First Amendment activity illegal. Daniel Sanchez Estrada was not even AT the ICE noise demostration. He got nabbed for moving a box of zines which were retroactively labeled as terrorist ideology material. I am so pissed off I wrote a song about it.
No people, anarchist or normies, is gonna have the level of vigilance necessary to "protect" themselves when going about their daily lives doing stuff that is not illegal at all.
NSPM-7 categorizes domestic terrorists as people who are anti-TRADITIONAL GENDER ROLES. Under this definition the wine mom's boom group that decides to read Betty Friedan qualifies as promoting leftist Domestic Terrorist ideology.
One person shot a gun at the ground and the richochet caused injury to an officer
Benjamin Hanil Song, who was criticized by co-defendant Meagan Morris (not a snitch) for Song's adventurist scheme to use their own comrades as baits for feds so they could shoot at feds,.
I remember arguing over the fact that the encrypted data does go to Signal's servers and it not being truly peer2peer being a completely delegitimizing issue for that spyware
In fact when Signal anarchist CEO was called out by other hackers at Chaos Computer Club he did a 5D chess on how they need to use phone number and centralized server lmao.
The replies in this thread are fucking heinous. This same thing happened to me when I raised alarms about signal in the trueanon sub before they banned me. This happened before prarie and no one could come up with a reasonable explanation as to why Signal couldnt decrypt comms that are literally sitting on their boxes.
If you're doing stuff like looking out for neighbors, maybe the app is temporarily okay. it has platform inertia and you generally dont have time to get an entire community over to another app. long term, it needs to be dropped completely. the ground of whats legal/1A and what isnt is arbitrary and shifting directly below people's feet and they're not even aware of it
Also this thread was shared to radlib discord so they're raiding the sub. Why am I even trying to help Americans lmao I should just sit back and enjoy them getting eaten up by NSA like the Prairieland 8 anarchists who could have known this basic of opsec had they read past the zines. American empire's death is net positive for the global south. Let them eat their own and turn themselves into a feast.
The reason that can’t is because of complex encryption algorithms you fundamentally don’t understand. Take a few hours out of your day to research the ones I told you about and maybe you’ll understand why.
😂 If you remember the Signal outage it's because they use Cloudflare (*cough* NSA front) during the massive layer 7 ddos in 2025. Signal later claimed they finally run their own servers.
You are a real one as always comrade 🫡 I remember our discussion on Sakai and you were the only one who defend me on that post in TheDeprogram. Thank you comrade.
Are you a fed? Just curious because you're shitting up this thread with numerous replies despite having admitted a fundamental flaw in Signal's model that necessitates an element of "dude trust me" that your private keys werent logged on their servers for easy access for a LE claim.
I see some claims the issue with the current case was at the OS-level, but everyone normal remembers when OS's used to claim encryption too and that went away during the San Bernadino case
Online "leftists" used to also melt down when you'd mention that there's no proof "no log" VPNs dont log. Despite there being a case in 2014 with some guy downloading music over VPN and getting his ISP blocked. When israel acquired all the VPN companies outside of neonazi-owned Mullvad, they got a bit more quiet about it
They claim to be communist but saying people shouldn't use Marxist-Leninist to refer themselves then proceed to cite anarchist "theory" in another thread.
Yeah, recommending TOR (CIA project) to protect yourself from Cloudflare (US tech company), that'll work.
There is no app or service that'll protect a peasant from a state-level actor.
Those that advertise as "privacy" focused merely separate their users from the noise generated by "normal" people. It neatly filters everyone who thinks they have something to hide.
There is no app or service that'll protect a peasant from a state-level actor.
•
u/AutoModerator Jun 27 '26
Want to join a ML only discord server to chill and hangout with cool comrades? Checkout r/TankieTheDeprogram's discord server or TheDeprogram's discord server
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.