fosstodon.org is one of the many independent Mastodon servers you can use to participate in the fediverse.
Fosstodon is an invite only Mastodon instance that is open to those who are interested in technology; particularly free & open source software. If you wish to join, contact us for an invite.

Administered by:

Server stats:

11K
active users

@signalapp it seems you have not publicly documented how the usernames feature works in terms of the back-end.

If the Feds subpoena Signal with a username, what data will they get from you? Will they get the user’s phone number? In reverse, if the Feds subpoena a phone number, will they get the associated username? What about one’s history of numbers/usernames?

@yawnbox @signalapp
I also wonder if ACI is visible to group members or do they only get access to some indirect identifiers. This is not something obvious from the API, need to dive deeper into the code to find out. Invisible in the UI unique identifier trackable across groups has already caused a lot of real problems for Telegram users, hopefully Signal does not repeat this mistake, visible phone numbers are sometimes better than this.

It is confirmed that Signal can convert usernames to phone numbers: theintercept.com/2024/03/04/si

> If Signal receives a subpoena demanding that they hand over all account data related to a user with a specific username that is currently active at the time that Signal looks it up, they would be able to link it to an account.
@yawnbox @signalapp
@micahflee

The Intercept · Signal’s New Usernames Help Keep the Cops Out of Your DataBy Micah Lee