I would like to express concern about the future of the Signal messenger. Although Signal currently has a significantly smaller audience than WhatsApp, there are existential risks associated with the messenger covering a larger number of users. Is it rational to say that the goal of this messenger is to be used by the largest number of users, so let’s assume for a moment that Signal was able to achieve its mission and most WhatsApp users switched to Signal - I know this is right now unrealistic, but even 30% of users would be an enormous, huge number. Thus, what is the future of the messenger when it starts organizing communications for 1 billion users worldwide?
Would it be rational to assume that counterintelligence forces and special police will send their agents to the organization as undercover workers to sabotage the work and embed backdoors during companies in the context of company growth and staff expansion in this scenario? The question is rhetorical.
I would like to hear the response of the company’s president to this existential threat, and to thank for their work.
This was caught by the community thanks to it being FOSS, and it was somewhat distinct from the scenario we’re talking about here, since the repository was wholly taken over by a bad actor who tricked the original (burnt out) maintainer to hand over the repo.
Could a bad actor get their claws in and take over the repo? Possibly, but given the fact that it’s maintained by a foundation with lots of devs and not just one thankless hobbyist, that likelihood is probably small.
Regular? I don’t know. They have been audited, iirc, and they have received numerous legal requests to turn over data to courts, to which they’ve been able to reply “what data?” Bear in mind that they would almost certainly not do this if it meant jeopardizing their entire business. No business is going to go to jail for us, after all.
You do what you feel is appropriate for your threat model, but as far as general threats to privacy or Signal’s existence go, I’m not currently concerned about their future.
Hi, I think you not really understood threat that I published -undercover agents -developers that will apply for the job at signal and receive it, and they will do their backdoor without Signal foundation knowing,its obvious. About audites that you mentioned - could you provide some link to it?