Hacker News new | ask | show | jobs
by dkasper 633 days ago
I think you answered why the only real solutions are

a) don’t collect the data (signal approach)

b) hire an army of lawyers and compliance people (big tech approach)

c) ban users from entire countries where you don’t comply (common in crypto)

d) risk jailtime or asset forfeiture

1 comments

Signal has both phone numbers and IPs.
Signal hand over IP logs, phone numbers, and the datetime of last connection. [0]

[0] https://signal.org/bigbrother/central-california-grand-jury/

That link states that they only have two data points tied to an account: time of account creation and time of last connection. Since phone numbers are used as the account identifier, law enforcement would need to supply the phone number for signal to look up the account, right?

Do you have any source for Signal supplying IP logs?