news.volyx.in

Signal on Android: Images sent to wrong contacts (github.com)

654 points by frankjr · 1887 days ago · 382 comments on HN

Article summary

A bug in Signal's Android app caused images to be sent to the wrong contacts, potentially leaking private data. The issue was reported on GitHub and has been fixed in version 5.17. The bug was difficult to track down and existed for several months, raising concerns about the app's security and privacy. The incident has sparked a discussion about the app's reliability and the importance of transparency in handling security issues.

Main themes

  • Signal security bug
  • privacy concerns
  • app reliability
  • alternative messaging options
  • transparency in security issues
  • comparison to other messaging apps

What commenters say

  • The bug is a serious privacy breach that undermines Signal's value proposition as a secure messaging app.
  • The issue was handled poorly, with a lack of transparency and a slow fix, which is unacceptable for a security-critical app.
  • Signal's focus on privacy and security is not enough to excuse its mistakes, and users should consider alternative apps.
  • The decentralized nature of email makes it a more secure option for private communication, despite its own security weaknesses.
  • The bug is an isolated incident and does not reflect a larger problem with the app's security or development process.
  • Signal's commitment to privacy and security is still stronger than that of other popular messaging apps, despite this incident.