Idk much about XMPP but can give some info on Signal.
Signal you can use a burner number, and good luck to someone hijacking your information if they have access to that phone number.
You can also use Signal on PC, just requires the phone number for signup.
If you have a burner computer with signal and a burner number, and you’re using device security and doing shit off someone else’s internet, you’re more than likely safe.
What’s dangerous about Signal and other secure apps IMO is group chats.
Group chats send out notifications, and if you’re aware of how the notification system works, you’d know all of that information is basically sent to one of two (maybe more but it’s limited) servers. These servers have been breached for a long time, meaning the government can read the metadata from notifications.
If a bad actor was to come into chat, and record exactly when they send a message to a certain group, every single member within that group can be identified if they aren’t using proper precautions.
Edit: video on notifications that’ll explain better than I can:
https://youtu.be/vg9ETJkeaTE?si=ykmd4FVsa0PELcPF
newIDwhodis
npub1w8…yvynv
2024-07-31 22:20:22 UTC
in reply to nevent1q…dcsz
Author Public Key
npub1w8805t3hzmgmtg5gcezf8www6y2k6jr6cvfnu2zaz52x8l3z2wpshyvynvSeen on
wss://relay.momostr.pinkPublished at
2024-07-31 22:20:22 UTCEvent JSON
{
"id": "08f1d37cab99cc80e13d56be599fcc0a053726c6bd1e3ab007a05621e2a09f29",
"pubkey": "71cefa2e3716d1b5a288c64493b9ced1156d487ac3133e285d151463fe225383",
"created_at": 1722464422,
"kind": 1,
"tags": [
[
"proxy",
"https://kolektiva.social/@newIDwhodis/112883428376554962",
"web"
],
[
"e",
"ae834ec75198e946fcaf9e67ce0a83ce80423f43a696cd4fb13c1abb4adc22e6",
"",
"root",
"1568b9f00df77e1acb1ce389a3b990c38f0cec6d3c801c1dece1d931a5f24005"
],
[
"p",
"1568b9f00df77e1acb1ce389a3b990c38f0cec6d3c801c1dece1d931a5f24005"
],
[
"proxy",
"https://kolektiva.social/users/newIDwhodis/statuses/112883428376554962",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://kolektiva.social/users/newIDwhodis/statuses/112883428376554962",
"pink.momostr"
],
[
"-"
]
],
"content": "Idk much about XMPP but can give some info on Signal.\n\nSignal you can use a burner number, and good luck to someone hijacking your information if they have access to that phone number.\n\nYou can also use Signal on PC, just requires the phone number for signup.\n\nIf you have a burner computer with signal and a burner number, and you’re using device security and doing shit off someone else’s internet, you’re more than likely safe.\n\nWhat’s dangerous about Signal and other secure apps IMO is group chats.\n\nGroup chats send out notifications, and if you’re aware of how the notification system works, you’d know all of that information is basically sent to one of two (maybe more but it’s limited) servers. These servers have been breached for a long time, meaning the government can read the metadata from notifications.\n\nIf a bad actor was to come into chat, and record exactly when they send a message to a certain group, every single member within that group can be identified if they aren’t using proper precautions. \n\nEdit: video on notifications that’ll explain better than I can:\n\nhttps://youtu.be/vg9ETJkeaTE?si=ykmd4FVsa0PELcPF",
"sig": "6cfb76c9b06d9305aeecf380f0b3d0249db97b28ac5e0681b6942666fdcea188c448d2a9cd0f23e53738e5ae216f3b1442e198228a5c8e7eede661ff11f39157"
}