We Need to Talk About Signal: Security Assumptions, Threat Models, and Activist Community Risk

Abstract:

The widespread adoption of Signal has transformed how activist and community groups coordinate when privacy and personal safety are on the line. The ability to share real-time information securely can change the outcome of a crisis. But secure by default does not mean secure in practice.
Signal provides strong end-to-end encryption, yet its protections are often misunderstood. Many users assume encryption guarantees safety. It does not. Effective security depends on shared threat models, aligned risk tolerances, and consistent operational discipline across the group. When participants operate under different assumptions about risk, anonymity, device hygiene, or message retention, they can unintentionally expose one another to surveillance, infiltration, or targeted retaliation.
Security failures rarely stem from broken cryptography. They arise from misaligned expectations inside trusted communities. Security is not only a technical property. It is a social process. When members prioritize convenience, visibility, or personal safety differently, subtle behaviors and common misunderstandings can undermine strong technical protections.
This presentation examines Signal’s security model, clarifies what it does and does not protect against, and explores how group dynamics shape real-world risk. Drawing on personal examples, we will analyze how communities have been compromised both intentionally and inadvertently.
Designed for both technical professionals and non-technical activists, this talk provides practical frameworks for defining shared threat models, negotiating risk trade-offs, bootstrapping secure group communications, and recognizing when compromise risk has become unacceptable. Participants will leave with concrete guidance for aligning expectations, reducing group exposure, and, when necessary, dissolving and rebuilding a chain of trust before damage becomes irreversible.