Contact discovery is the quiet cost of using a phone number as your identity.
To show you who's on the app, the app has to ask about everyone in yout phone. Some keep the list. Some say they don't.
Morse skips the question. No number. No contact sync. You share an ID.
#OPSEC365 236/365
Messaging apps harvest phone numbers from your contacts to build user databases.
When Signal, WhatsApp, or Telegram checks which of your contacts use the service, they're uploading phone numbers to their servers. Even if your contacts never joined, their numbers exist in the platform's database because you uploaded your address book.
Every contact you upload gives that platform the phone number of someone who never agreed to be in their database.
#OPSEC365
12
Arrested in July. Interviewed by police for the first time in December. Charges dropped five days later.
A face match should start an investigation. Here it replaced one.
“It’s just software. I’ve done nothing wrong.”
Facial recognition software linked a Tennessee woman to bank fraud in North Dakota.
She said she’d never been there.
Her bank records agreed.
She sat in jail for months before the charges were dropped.
Innocent until matched.
17
Encryption is good for protecting what you say, but it doesn't hide your photo, about or how many devices you're on. A phone number is the key to access your metadata.
OSINT: Gathering Information on a WhatsApp Account
A phone number alone can reveal profile photos, status updates, and linked devices.
Our guide shows exactly how you can legally and effectively extract intelligence from WhatsApp accounts!
hackers-arise.com/open-sourc…
18
Privacy is not about hiding. It's about staying safe. Nothing wrong with that.
"Privacy is only for people hiding something."
So is a locked door.
So is a curtain.
So is an unlisted number.
Protection is being re-framed as "hiding".
Locks were never about guilt.
They were always about who gets to decide who enters.
37
We built a messenger without phone numbers. A number quietly does five jobs for every big messenger, and taking it away means rebuilding all five.
A few of the hard parts, with the full write-up at the end:
2
1
9,664
Giving up a username needed care too.
Your app only shows a contact's username with a short-lived certificate from our server. So a released name is held for longer than any certificate lives, and nobody can grab it while a phone still trusts the old owner.
1
20
And notifications for a locked app: the database stays closed, so the sender seals a short preview to a separate key on your phone. Fail one check and you just see "New message".
Everything, with diagrams:
joinmorse.com/blog/messenger…
23
Meet the Operator, the newest face on Morse.
He’s been behind the scenes getting things ready for a few new arrivals. You’ll get to meet them soon.
In the meantime, here’s a peek inside the control room.
/start
1
66














