Signal tries to hide sender metadata: https://signal.org/blog/sealed-sender/ Google to enforce two years of security updates: https://www.theverge.com/2018/10/24/18019356/android-security-update-mandate-google-contract Attacking Google Authenticator: https://www.unix-ninja.com/p/attacking_google_authenticator