Removal Notice: On February 7, 2021, BleepingComputer published an article on a possible security issue affecting Signal’s proposed temporary censorship solution.
Since then, we have received reports disputing parts of the story.
The original report of the researchers on this alleged security issue was published publicly on GitHub, where it was removed by Signal. BleepingComputer has learned that this was not done to suppress the discussion, but because it was placed in the wrong place.
Discussions on such matters are intended on Signal’s community forum.
Readers also stated that the discussion did not happen in a respectful way and violated Signal’s code of conduct.
The researchers later posted the details of the original release in a separate GitHub repository, but because the original GitHub release was removed and not archived, we could not verify the authenticity of this post.
Furthermore, we were informed that the alleged security vulnerability is not a real vulnerability in Signal’s proxy implementation.
Signal founder Moxie Marlinspike also tweeted several times [1, 2, 3] disputes the alleged security issue and why the researchers’ GitHub issues were removed.
Due to the conflicting information received by BleepingComputer, we have removed our original article.