Post #1174737
2026-03-09 16:17 UTC
Replies (14)
-
@kkarhan@infosec.space 2026-03-09 18:21
@signalapp@mastodon.world THERE IS NO LEGITIMATE REASON FOR #Signal TO DEMAND A #PhoneNumber (= #PII by circumstances if not mandatory doxxing to the governments aka. "#KYC")… so yes I do blame Signal because this attack vector is unique to #Signal's shittyness and would not exist with @monocles@monocles.social / #monoclesChat or even cock.li of all places…
-
@signalapp@mastodon.world 2026-03-09 16:17
While we build robust technical safeguards, user vigilance is ultimately the best defense against phishing. We will continue to work on mitigating these risks via interface design and signposting throughout the app. In the meantime, please stay alert, and never share your SMS verification code or Signal PIN with anyone. https://support.signal.org/hc/en-us/articles/9932566320410-Staying-Safe-from-Phishing-Scams-and-Impersonation
-
@loke@functional.cafe 2026-03-09 16:22
@signalapp as careful as this message is, I think it could be improved. If someone goes to a web page and get phished by being asked to type it into the page, the message will not dter them because it's not someone "asking for the code". I think the message should say something about where it's intended to be used.
-
@FQQD@chaos.social 2026-03-09 16:25
@signalapp you dum dum you just publicly shared it
-
@unaegeli@swiss.social 2026-03-09 16:38
@signalapp Hmmm, and what about the monthly reminder to enter the personal smartphone code? How to differentiate this from the other?
-
@izby@mastodon.social 2026-03-09 17:56
@signalapp You should add the ability to sign up with email. I'm not sure that Russian users can log in with a code from SMS.
-
@project1enigma@chaos.social 2026-03-09 19:05
@signalapp Here an actually precise image ALT text would be crucial.
-
@rbairwell@mastodon.org.uk 2026-03-09 19:22
@signalapp Why not change the message to "To setup Signal on your new phone, please enter code ..." to make it absolutely clear what the code is for and create additional friction for scammers as they'll have to come up with an excuse as to why it says new phone.
-
@Orca@nya.one 2026-03-09 21:54
@signalapp@mastodon.world #Alt4You Better alt-text A SMS message from Signal, reads: SIGNAL code: 751912. Do not share this code with anyone. If anyone asks it's a SCAM. Our reps will NEVER ask for it.
-
@gunstick@mastodon.opencloud.lu 2026-03-10 07:00
@signalapp@mastodon.world maybe write: "If you are currently installing signal, use this code. If some chat website or phonecall asks for it, it is an attack trying to steal your account."
-
@jawadamc@mastodon.social 2026-03-14 00:10
@signalapp@mastodon.world i m having issues connecting with signal app in Pakistan, kindly share proxy, thanks in advance
-
@agowa338@chaos.social 2026-03-14 10:09
@signalapp@mastodon.world As if anyone would read anything besides the underlined numbers...
-
@curious_ted@mastodon.social 2026-04-05 21:10
@signalapp@mastodon.world Well this is all good, but I hope you guys, while we're still on pins and registrations, are also working towards actually getting them through on major Nigerian sim carriers(MTN, Glo). They've not gone through for months and I got all excited hoping to invite my mates to a platform that actually respects the users. But it seems you guys might be more focused on respecting european, and US users.
-
@OmegaPolice@hachyderm.io 2026-04-27 06:51
@signalapp@mastodon.world While I'm generally on your side here, that argument is bollocks. "We told you four years ago in that message you left on your old phone!" That just doesn't work. You have users losing their chat history because they ignore instructions. That's _users_ for you, but that's also human beings who have no concept of how crypto systems work (and who can blame them?). "But WhatsApp doesn't need me to do that?!" Sigh. FWIW, I don't think there's a technical solution to the education problem. We, as a society, need to learn the basics of IT and how to remain somewhat safe in an IT system, the same way we have an idea of how a stove works and how we've learned to turn it off again.