F*CK SIGNAL!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!1

Summary

The video is a critical analysis of Signal’s privacy and security design. The narrator acknowledges that Signal has made improvements, but argues that its reliance on phone numbers, centralized infrastructure, and convenience-focused features leaves important gaps in privacy and resilience.

Account Registration and Anonymity

• Signal historically required a phone number to register and discover contacts. The narrator says this could expose users to unwanted contact or targeting, and make access harder in countries that block Signal or restrict phone registration.
• Signal later introduced usernames and made phone numbers no longer visible by default. The narrator welcomes this change but argues that it arrived years late.
• A newer account-creation option is presented as more private because payments are not tied to an account. However, the narrator says it still depends on services such as Google Play Services or Apple’s payment system, limiting access for people without those services or in places where Signal is restricted.
• As comparisons, the video cites Threema’s direct app downloads and multiple payment options, as well as free messaging apps that do not require a phone number or email.

Centralization and Resilience

• The narrator argues that Signal depends on centralized services—including app stores, payment processors, phone carriers, cloud hosting, and governments—that could restrict access or disrupt service.
• The video advocates allowing other organizations or volunteers to help operate the network, describing this as decentralization. It contrasts Signal with projects such as Matrix, SimpleX, Briar, and Cwtch, which the narrator says offer greater resilience.
• The broader point is that end-to-end encryption alone is not enough: metadata exposure, account access, availability, and resistance to censorship also affect privacy.

Security and Design Criticisms

• Phishing and account takeover: The video describes a phishing campaign targeting German lawmakers’ Signal accounts. It says attackers impersonated Signal support and obtained PINs or registration codes. The narrator argues that discoverable phone numbers helped identify targets, and notes that Germany reportedly advised lawmakers to use Wire instead.
• Sealed Sender and delivery receipts: Sealed Sender is intended to reduce information about who sent a message. The narrator argues that delivery receipts generate traffic patterns that can help observers infer who is communicating with whom, and says users cannot disable those receipts in Signal.
• Desktop message storage: The narrator says Signal Desktop does not encrypt its local message database at rest, leaving message data accessible to software running on the computer. The video says this concern was raised with Signal in 2018 and cites researchers who advised against using the desktop app.
• PINs and backups: The video criticizes Signal’s use of Intel SGX to protect backups and says the interface encourages users to choose weak PINs. The narrator argues that these choices create avoidable risks.

Comparative Assessment

The narrator says Signal remains recommendable but ranks poorly—or among the worst—on several criteria in a privacy threat-model comparison. Alternatives named include Threema, SimpleX, Session, Delta Chat, Briar, Cwtch, Wire, and Matrix. The video claims that some provide phone-number-free accounts, direct app downloads, alternative payment methods, or decentralized infrastructure.

Review or Tutorial Content

This is an opinionated product and security analysis, including a comparative privacy ranking. It does not provide a step-by-step guide or tutorial.

Main Speaker and Sources

• Main speaker: The Hated One, the video’s narrator.
• Sources and people referenced: Signal’s registration announcements and responses; Signal CEO Meredith Whittaker; security researchers discussing Signal Desktop; Johns Hopkins professor Matthew Green; German guidance concerning lawmakers’ messaging apps; and the messaging projects named for comparison.