signal

https://www.bleepingcomputer.com/news/security/signal-downplays-encryption-key-flaw-fixes-it-after-x-drama/

Bleeping Computer once again doing the absolute best job of compiling information about an issue.

There has been a long standing argument about Signal Desktop in my circles. Ranging from vague "don't use it" to a more nuanced "the desktop OS is weaker than the mobile device and therefore using it for secure comms is bad practice".

https://www.att.com/support/article/my-account/000102979 - this (finally) has the timeline (May 2022 - November 2022) for the data and guides as to how get copies of the data that was breached

https://freedom.press/training/blog/att-breach/ - Article covering the breach by FPF's principle researcher Dr. Martin Shelton

https://signal.org/blog/phone-number-privacy-usernames/

The ability to use Signal with a source without giving out your phone number was a tricky thing before this, I'm excited to see the change!

https://support.signal.org/hc/en-us/articles/360007318471-Signal-Beta#join