215
Signal registration without a phone number now available in Android beta (but payment required!) (aboutsignal.com)
submitted 2 weeks ago by to c/privacy@lemmy.dbzer0.com
81 comments fedilink hide all child comments
 

Signal has started rolling out Signal Login, an optional registration method that allows users to create a Signal account without providing a phone number. The feature will be rolled out first on Android and will come to iOS later.

As we previously reported, Signal Login is not a free alternative registration method. Signal requires users who choose to register without a phone number to make a one-time payment. The price at launch is $2.99 / € 3.49, although this may vary by region and currency.

you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 2 weeks ago (7 children)

Or if you want the tinfoil hat response... they need/want to tie your account to a real identity for surveillance purposes, and they can't do that if there is no phone number, so they use a payment record instead.

They're using zero-knowledge proofs for the payments so they can't link the account to the credit card used to pay it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 2 points 2 weeks ago* (1 child)

    Zero-knowledge proofs as a concept sound sus to me. How do you prove that you don't know something? The fact of being tested already means you know of it. What's a good writeup n how Signal does it? And how can a user of Signal test or certify it?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 2 weeks ago* (4 children)

    they can’t link the account

    Google can, since it's their OS and their payments.

    But even if you're not using Play Store to pay, the vast majority of people who are paying are going to be using the same device/IP/fingerprint/etc. where Signal is running, so it's not impossible to put the two together to link an account to a specific payment, if say, a government forced them to do so in order to track someone. It's just a bad idea for several different privacy reasons.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 0 points 2 weeks ago (3 children)

    Google can know you've paid but they can't link it to your Signal account thanks to zero-knowledge proofs.

    Except for tracing IP addresses, timing etc... as you've mentioned, but that's much more involved and cannot be done retroactively.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 1 week ago* (last edited 1 week ago) (2 children)

    They can... as I said they control the entire OS. They can see you're running Signal with account# XYZ, that you clicked the pay button, that Signal generated the ZKP (which they can read in memory or network packets), and all the key clicks and numbers entered of the payment details for that ZKP, the entire process.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 1 week ago (1 child)

    That's just conspiracy theories at this point. If you assume google is constantly spying on the memory of all applications on your phone there is no reason at all to believe that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •