DI Signal si è già detto molto, ma questo (imho) è un ottimo pezzo che va più in profondità del solito: allarmante, fra l'altro, l'idea del nuovo bill che richiederebbe alle aziende che offrono crittografia end-to-end, di inserire delle backdoor.

"Signal, by contrast, cannot comply with law enforcement even if it wanted to. (It’s not clear that it does: in early June, Signal’s founder and CEO Moxie Marlinspike tweeted “ACAB” — All Cops Are Bastards — in response to allegations that police had stockpiled personal protective equipment amid the pandemic.) In 2016, a Virginia grand jury subpoenaed Signal for data about a user, but because it encrypts virtually all its metadata, the only information Signal was able to provide in response was the date and time the user downloaded the app, and when they had last used it. “Signal works very, very hard in order to protect their users by limiting the amount of metadata that is available in the event of a subpoena,” Holmes says.

The approach has not won Signal fans in the Justice Department, which is supporting a new bill that would require purveyors of encrypted software to insert “backdoors” to make it possible for authorities to access people’s messages. Opponents say the bill would undermine both democracy and the very principles that make the app so secure in the first place. Ironically, Signal is commonly used by senior Trump Administration officials and those in the intelligence services, who consider it one of the most secure options available, according to reporters in TIME’s Washington bureau.(...)

It’s impossible to know how much user data WhatsApp alone provides to authorities, because Facebook only makes such data available for all its services combined — bundling WhatsApp together with Instagram and the Facebook platform itself. (WhatsApp’s director of communications, Carl Woog, declined to provide TIME with data relating to how often WhatsApp alone provides user data to authorities.) Still, those aggregate data show that in the second half of 2019, Facebook received more than 51,000 requests from U.S. authorities for data concerning more than 82,000 users, and produced “some data” in response to 88% of those requests. By contrast, Signal tells TIME it has received no requests from law enforcement for user data since the one from the Virginia grand jury in 2016. “I think most governments and lawyers know that we really don’t know anything,” a Signal spokesperson tells TIME. “So why bother?”

https://time.com/5893114/signal-app-privacy/

Ciao,

F.

--