18
Signal will finally let you register without a phone number, for a price (www.androidauthority.com)
submitted 1 month ago by to c/technology@piefed.social
8 comments fedilink hide all child comments
 

  • Signal’s new beta introduces numberless registration for new users.

  • It costs a one-time fee of $3, which is paid anonymously and not linked to your Signal account.

  • It also adds support for two-factor authentication for numberless accounts.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 month ago (5 children)

Can someone (such as Signal itself) please explain how the "anonymous" payment is supposed to work? Concisely but in sufficient detail to understand the principle I mean, without just saying "zero knowledge" and doing a bunch of hand waving when you get to the complicated part.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 4 points 1 month ago (2 children)

    Looks like it currently requires Google play. Not sure how it works on iphone.

    Can I buy an account on a device that has no Play Services?

    Not yet. We have plans to add more payment methods, but currently only offer Play Store in-app payments, which requires Play Services.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 1 month ago (1 child)

    I suppose you'd be buying some kind of generated token that doesn't correspond to your account ID in any way, then doing some fancy math to prove to the Signal servers that you have such a token without revealing which one it is, while at the same time preventing the same token being used more than once. Given that there's no need to tie it to any real-world attributes of the user (i.e. this is not like "age verification") it seems like this should be possible, but I'm curious about the details.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 month ago (1 child)

    TL/DR: You can read about it in detail here: https://eprint.iacr.org/2019/1416.pdf

    According to PrivacyGuides, regarding this announcement:

    The payment uses the same zero-knowledge proofs as Signal's donation system, so they won't be able to correlate your payment info to you.

    According to Signal's support article:

    Is my payment information linked to my Signal account?

    No. Your payment information is not associated with your Signal account. Using the anonymous credential scheme that we introduced for Signal private groups, clients make payments and then associate a badge to their profile such that the server can authenticate the client is in the set of people who made a payment, but doesn’t know specifically which payment it corresponds to.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 month ago

    You can read about it in detail here

    Not exactly it seems, but we can read there about something which is apparently related to it in some way. If I ever manage to figure out which 3 of the 58 pages of mathematics paper it would take to explain the basic flow of the protocol, maybe it will become clear.

  • permalink
  • fedilink
  • source
  • parent