Comment by dredmorbius
2 years ago
Your previous question was "I'm not sure why you need to assume that it will be linked back to your real identity?"
If it's not possible to buy a phone without a strong attestation of identity, as is the general case in at least one country, then the identity relationship is baked in.
It's probably possible to buy a burner phone even in South Korea. But for those who are using their standard-issue phone with Signal, the problem most certainly exists.
And even in countries where there isn't some national phone-as-identifier policy, effectively most people's phone numbers tie them to their real-space identity even if there's no explicit personal data association[1], and in most cases, phone number, IMEI, AAID, and/or billing data (credit card payment authorisation) provide far greater assurance.
________________________________
Notes:
1. <https://www.eff.org/deeplinks/2023/11/debunking-myth-anonymo...>
2. IMEI: <https://en.wikipedia.org/wiki/International_Mobile_Equipment...>, AAID: <https://support.google.com/authorizedbuyers/answer/3221407?h...> <https://noyb.eu/en/buy-phone-get-tracker-unauthorized-tracki...>
OK, yeah, I meant "I'm not sure why you need to assume that it will be linked back to your real identity by Signal ?"
Fair enough, and I see where you're coming from.
Point remains that 33 bits will identify any given person among the 8 billions now living, and a phone number itself, plus ancillary leakage (activity patterns, location) are an exceptionally poor basis for an anonymous or pseudonymous identifier.