Post #2359118

2026-04-22 21:06 UTC

I&#39;ve tried to report a security vulnerability to @signalapp for months now (first attempt was 2025-11-23 to the official security-at email address). I haven&#39;t gotten any response from them, even after repeated attempts. This is highly frustrating. Is there a way to reach them? I don&#39;t need any kind of special treatment, just someone acknowledging that the message has been received would be okay. #signalapp

Replies (6)

@leffe@social.linux.pizza 2026-04-22 21:25

@harrysintonen@infosec.exchange @signalapp@mastodon.world Adding @Mer__edith@mastodon.world

Open ##2868181
@pancake@infosec.exchange 2026-04-23 06:14

@harrysintonen@infosec.exchange similar experience reporting bugs here, all mine ended in WONTFIX or closed for inactivity after years. I just didn’t cared anymore

Open ##2868182
@tris@chaos.social 2026-04-23 06:27

@harrysintonen@infosec.exchange @signalapp@mastodon.world cc: @soatok@furry.engineer

Open ##2868183
@aral@mastodon.ar.al 2026-04-23 06:55

@harrysintonen@infosec.exchange @signalapp@mastodon.world CC @fj@mastodon.social You still know any folks there who might be able to help (themselves, I guess, at this point?)

Open ##2868184
@jens@social.finkhaeuser.de 2026-04-23 07:12

@harrysintonen@infosec.exchange @signalapp@mastodon.world @Mer__edith@mastodon.world might care.

Open ##2868185
@Netux@mastodon.sdf.org 2026-04-23 08:38

@harrysintonen@infosec.exchange @signalapp@mastodon.world use it to send them something that demonstrates the problem? Like their screenshot or password, whatever the issue is.

Open ##2868186