← Back to context

Comment by dredmorbius

2 years ago

Your previous question was "I'm not sure why you need to assume that it will be linked back to your real identity?"

If it's not possible to buy a phone without a strong attestation of identity, as is the general case in at least one country, then the identity relationship is baked in.

It's probably possible to buy a burner phone even in South Korea. But for those who are using their standard-issue phone with Signal, the problem most certainly exists.

And even in countries where there isn't some national phone-as-identifier policy, effectively most people's phone numbers tie them to their real-space identity even if there's no explicit personal data association[1], and in most cases, phone number, IMEI, AAID, and/or billing data (credit card payment authorisation) provide far greater assurance.

________________________________

Notes:

1. <https://www.eff.org/deeplinks/2023/11/debunking-myth-anonymo...>

2. IMEI: <https://en.wikipedia.org/wiki/International_Mobile_Equipment...>, AAID: <https://support.google.com/authorizedbuyers/answer/3221407?h...> <https://noyb.eu/en/buy-phone-get-tracker-unauthorized-tracki...>

OK, yeah, I meant "I'm not sure why you need to assume that it will be linked back to your real identity by Signal ?"

  • Fair enough, and I see where you're coming from.

    Point remains that 33 bits will identify any given person among the 8 billions now living, and a phone number itself, plus ancillary leakage (activity patterns, location) are an exceptionally poor basis for an anonymous or pseudonymous identifier.