[jk700]

In the paper they were still able to cover 100% of US numbers for Signal and discover all of its users, but less than 0.02% for Telegram and discover only 908 of its users due to simple rate limits, how is Signal better at this exactly? On top of that the paper purposely chose unrealistic threat models and assumptions about privacy, as if letting other people know your phone number is somehow acceptable for privacy in the first place (it isn't and never was).

[ThePowerOfFuet]

Rate limits are trivial to skirt with rented botnets. Some "Free VPN" apps allow inbound traffic from paying clients to be redirected out to the internet.