Open Security | Thoughts & Commentary

The shirt reads NOT FRIENDLY DO NOT TOUCH in the flat, all-caps register of an industrial warning label. Above or beside the words sits a yellow caution triangle, and inside that triangle is a hand with a diagonal slash through it. That is the whole design. No slogan, no punchline, no second panel. A boundary stated in the grammar of workplace safety signage.

I want to read that grammar closely, because the interesting thing about this shirt is not that it is antisocial. It is that it borrows the visual authority of a hazard placard and spends it on a social preference. The joke — and the small design argument — lives in that mismatch.

What the caution triangle actually does

A yellow triangle with a black border is one of the most standardized shapes in public life. In the ISO 7010 family of safety signs, the equilateral yellow triangle with a black border is the general warning symbol; the specific hazard is carried by the pictogram inside it. I am describing the convention the design invokes, not claiming this shirt is a compliant ISO sign — it plainly is not, and it does not need to be. What matters is that the triangle arrives with a hundred years of institutional training behind it. We have been taught, in car parks and factory floors and airport corridors, that this shape means pay attention before you proceed.

So the shirt does something quietly clever. It takes a symbol whose entire job is to protect the viewer from harm and redirects it to protect the wearer from conversation. The warning is not about a wet floor or an electrical hazard. The hazard, from the wearer’s point of view, is being approached.

The crossed-out hand is doing more work than the words

Prohibition signs in the same ISO family use a red circle with a diagonal bar. This design uses a yellow triangle instead, and puts the slash inside it. That is a deliberate hybrid: the container says caution, the content says no. The result is a sign that is simultaneously warning you about something and forbidding you from doing something, which is exactly the ambivalent message many people want to send at a party.

The hand itself is the sharpest element. A crossed-out hand is not a crossed-out person, a crossed-out mouth, or a crossed-out speech bubble. It is the specific gesture of reaching out — the handshake, the tap on the shoulder, the friendly arm grab. The design does not prohibit talking. It prohibits contact. That is a narrower and more precise boundary than the words alone would suggest, and it is the detail that makes the shirt readable as a joke rather than a manifesto.

A slogan is not a usable promise

Here is where the design gets interesting for anyone who spends their working life around specifications, policies, and interface copy. A warning sign is a promise of a certain kind: it claims that if you read it, you will avoid a defined harm. The shirt borrows that promise and then declines to honor it in the usual way. It does not tell you what will happen if you touch. It does not offer a procedure. It simply asserts a state — not friendly — and a rule — do not touch — and leaves the enforcement mechanism entirely to the wearer’s face.

That is the difference between a slogan and a usable promise, and it is a difference worth keeping in mind whenever you write a warning of your own. A real warning tells you the hazard, the consequence, and the action. This one tells you the action and trusts you to infer the rest. As signage it is incomplete. As a piece of social writing it is efficient, because the missing information is supplied by the person wearing it.

Why the bluntness reads as humor rather than hostility

The words are rude. Not friendly is not a polite way to describe oneself. And yet the overall effect is comic rather than aggressive, and I think the reason is the formality of the format. A person who says “leave me alone” in a normal voice sounds hostile. A person who says it through a laminated hazard placard is making a joke about the absurdity of needing one. The institutional costume signals that the wearer knows the boundary is a bit much — that they are performing their own unsociability rather than genuinely threatening anyone.

This is the same reason a terse error message can be funny while a terse email cannot. The register does the softening. The shirt is not a rejection of other people; it is a rejection of the assumption that a person owes strangers access on demand.

The introvert framing and what it leaves out

The listing title calls this an introvert shirt, and the keyword people search for is the not friendly do not touch shirt. That framing is fair as far as it goes, but I would push on it slightly. Introversion is usually described as a preference for lower-stimulation environments and a cost to sustained social interaction — not a dislike of people. The shirt is blunter than that. It does not say I need to recharge. It says do not touch. The humor comes from collapsing a nuanced temperament into a piece of municipal signage, and the wearer is in on the collapse.

I would not read the design as a clinical statement about anyone’s personality, and I do not think it needs to be. It is a costume of a boundary, worn for a laugh, and it works precisely because everyone recognizes the feeling underneath it even if the sign overstates it.

Reading it as a design object

Strip away the joke and you have a clean piece of visual communication: three elements — warning triangle, crossed-out hand, all-caps text — arranged so that the eye lands on the symbol first and the words confirm it. The palette is the standard caution yellow against a dark ground, which is the highest-contrast combination available for a warning and the reason the design reads from across a room. There is no decorative clutter competing with the message. Whatever else you think of the sentiment, the layout knows what it is doing.

That is also why it functions as an object rather than only as a caption. A shirt that says something funny in small serif type is a shirt you have to lean in to read. A shirt that reproduces a hazard placard is legible at the distance at which the boundary is supposed to apply. The form matches the function, even if the function is a joke.

If you want the exact object I have been describing, it is the Not Friendly Do Not Touch warning-sign shirt from Quirky Cotton Collective, and the design is the one observed above: the caution triangle, the crossed-out hand, the blunt all-caps line.

What the design does not claim

It is worth being explicit about what this shirt is not. It is not a safety product, it does not prevent contact, and it does not certify anything about the wearer. It is a printed joke that borrows the authority of a warning sign and hands it back to you to enforce. The humor depends on everyone understanding that the sign is not real — which is why it works better as a social signal than as an actual barrier.

That is also the most useful thing to take from it. A warning sign is a promise, and a promise is only as good as the procedure behind it. The shirt is funny because it has no procedure at all. When you write a real warning — in a README, a privacy notice, a consent form — the triangle is the easy part. The hard part is the sentence that tells the reader what to do next.

Editorial note: this publication and Quirky Cotton Collective share an owner; this column is not an independent review.

The shirt reads LET’S ROOT FOR EACH OTHER AND WATCH EACH OTHER GROW, set in a ring around four smiling root vegetables: a carrot, a radish, a beet, and an onion. Their roots are drawn down into visible soil. The pun is immediate — root as encouragement, root as the underground part of a plant — and the design leans on it without apology.

What interests me is not the joke. It is the second clause. Watch each other grow sounds like a promise of mutual support, but the artwork quietly shows something more specific: growth that happens underground, out of sight, before there is anything to harvest. The roots are the part you don’t see. The smiling faces are above the soil line. The design puts both in the same frame and asks you to hold them together.

That is a useful distinction for anyone who works on a team, and it is the reason this shirt is worth reading closely rather than just wearing. The phrase let’s root for each other is easy. It costs nothing to say. The phrase and watch each other grow is harder, because watching someone grow means tolerating the period when their work is not yet visible — when the root is doing its job and the stem has not broken the surface.

Two Meanings, One Drawing

The visual observation is literal: four root vegetables, each with a face, arranged around the text, their roots extending into soil. The carrot is orange, the radish red, the beet deep purple-red, the onion pale. The soil is drawn as a band beneath them. The faces are simple smiles. Nothing about the drawing is realistic; it is a diagram of a pun.

But a diagram can still make an argument. The roots are drawn below the text, not beside it. The text surrounds the vegetables like a border or a banner. The effect is that the words are the frame and the roots are the content. The shirt is not just saying root for each other; it is showing you what rooting looks like when it is literal — a network of underground parts doing the work that makes the visible part possible.

I read that as a quiet correction to the way support is often used in workplaces. Support is usually measured in visible gestures: a shout-out in a meeting, a Slack reaction, a line in a performance review. The shirt’s drawing suggests that the more important support is the kind that happens below the surface — the unglamorous, unseen work of giving someone room to develop, of not demanding that their growth be immediately legible.

The Difference Between a Slogan and a Promise

A slogan is a sentence you can print on a shirt. A promise is a sentence you can be held to. Let’s root for each other is a slogan. And watch each other grow is closer to a promise, because it implies a duration. You cannot watch something grow in a single meeting. You have to be there for the season.

That is the part of the design I keep returning to. The four vegetables are not identical. The carrot is long and tapered; the radish is round; the beet is bulbous; the onion is layered. They are all root vegetables, but they are not the same shape, and they are not growing at the same rate. The shirt does not flatten them into a single ideal. It shows four different roots in the same soil, each doing its own thing.

For a technical team, that is a more honest picture of growth than most culture decks manage. People develop at different speeds and in different directions. The person who is quiet in the planning meeting may be doing the deep work that makes the launch possible. The person who ships quickly may be growing in a direction that is not yet visible. The shirt’s drawing does not resolve that tension; it just puts it on the table, surrounded by a pun.

What the Shirt Does Not Claim

I want to be careful here. The shirt does not claim that mutual support improves anything. It does not claim that watching someone grow is easy, or that every team is a garden, or that root vegetables are a metaphor for psychological safety. It is a drawing of four smiling vegetables and a sentence with two meanings. That is all it is.

But that is enough for a useful argument. The argument is that the phrase root for each other is only half the sentence. The other half — watch each other grow — is the part that asks something of you. It asks you to be present for the underground phase. It asks you to notice growth that is not yet above the soil line. It asks you to root for the root, not just the flower.

If you are looking for the shirt itself, it is the Let’s Root For Each Other And Watch Each Other Grow Garden design from Quirky Cotton Collective. The artwork is the argument; the shirt is just the surface it is printed on.

A Note on Ownership

This publication and Quirky Cotton Collective share an owner, so this is not an independent review.

What I have tried to do here is read the design closely rather than recommend it. The observation is simple: the text surrounds four root vegetables with visible roots in soil. The interpretation is mine: the drawing distinguishes between the visible part of growth and the underground part, and that distinction is worth keeping in mind the next time someone says they are rooting for you. The shirt does not prove anything about teams or gardens or growth. It just makes a pun and draws it well enough that the pun has a second clause.

That second clause is the one I would keep.

The native garment preview shows a dark shirt with very small, centered lowercase meh. lettering. No animal illustration is present. That is the whole object: four letters, a period, and a great deal of empty fabric around them. The scale is not incidental. At that size, the word is not a slogan you wear to announce a mood to a room. It is a message calibrated for the distance at which someone has to choose to read it.

Most printed humor works by volume. A punchline sits across the chest in a font chosen to survive across a parking lot. This design does the opposite. It treats the shirt as a surface with a center and a margin, and it puts the entire statement in the smallest legible unit the printer can hold. The result is closer to a punctuation mark than a poster.

I want to make an argument about that choice, not about the shirt as a purchase. The argument is this: the period is doing more design work than the word, and the scale is doing more than either. Together they turn a piece of slang into a claim about how a message should behave — short, final, and not especially interested in being overheard.

What is actually printed

Stick to what the preview shows. Lowercase meh, followed by a period, centered on a dark ground, rendered small relative to the garment. There is no illustration, no secondary text, no decorative frame. The type appears plain rather than ornamental. I am not going to claim a specific typeface from a garment mockup; the observation supports a description of plain lowercase lettering, not a font identification.

The period is the detail worth pausing on. In casual writing, meh alone reads as a shrug — an open-ended noise. Meh. with a full stop reads as a verdict. The period closes the sentence and, by extension, the conversation. It is the difference between trailing off and declining to continue.

That is an interpretation of typography, not a historical claim about where the word came from. I am not asserting an origin for meh or a timeline for its spread. The design does not need that backstory to work. It needs only the reader’s familiarity with the word and the small shock of seeing it punctuated like a completed thought.

Small type is a boundary, not shyness

There is a practical reason to print small: it controls who can read the shirt and when. Large text broadcasts. Small text requires proximity, and proximity is a choice the wearer can leave to the other person. The design does not initiate. It waits to be noticed.

For readers who spend their working lives in technical settings, that distinction should feel familiar. A terse message is not the same as a rude one. A short reply is not the same as a hostile one. The difference is usually context: who asked, what they needed, and whether the answer was sufficient for the task. Meh. is funny on a shirt precisely because it strips away that context and leaves only the tone. On a garment, the missing context is the joke.

This is where the shirt connects to a broader habit of mind without pretending to be a lesson in it. Teams argue constantly about message length. One person writes three paragraphs to say no; another writes one word. Neither is automatically wrong. What matters is whether the message carries the information the reader needs and whether the tone matches the relationship. A shirt cannot settle that argument. It can, however, make the argument visible in a way that a style guide cannot.

The difference between a slogan and a usable promise

A slogan asks you to agree with a feeling. A usable promise tells you what will happen next. Meh. is deliberately neither. It is a refusal to promise anything, which is why it reads as funny rather than motivational. The period makes the refusal polite. Without it, the word might seem to invite a follow-up question. With it, the sentence is closed.

That is also why the design avoids the usual clutter of sarcastic apparel. Adding a second line, an arrow, a coffee cup, or an animal would turn a closed statement into a bit. The restraint is the point. The shirt is not trying to be the funniest thing in the room. It is trying to be the quietest.

If you want the object itself, the listing is here: Meh Funny Sarcastic Introvert Minimalist Saying. The design is described in the preview as small, centered lowercase lettering on a dark shirt, and that description matches what the artwork shows. I am not going to tell you how it fits, how it washes, or how it feels after a day of wear, because I have not tested it and the preview does not establish those things.

Why the introvert framing is secondary

The retail title includes the word introvert, and it is easy to read the shirt as a personality badge. I think that reading is weaker than the typographic one. Introversion is a broad label; the shirt does not depict a person, a behavior, or a social situation. It depicts a word and a punctuation mark. The introvert framing is a shelf category, not the design’s argument.

The stronger reading is about message discipline. The shirt is a small essay on how to end a sentence. It says: here is a complete thought, it is not enthusiastic, and it is finished. That is a useful thing to have a visual vocabulary for, even if the vocabulary is one word long.

What the design does not do

It does not diagnose anyone. It does not cure apathy, improve mood, or signal a medical or psychological state. It does not prove anything about the wearer’s personality, politics, or profession. It is a printed word on fabric, and the argument here is about how that word is set, not about what it says about the person inside it.

It also does not demonstrate a software result, a security practice, or an engineering outcome. The connection to technical readers is temperamental, not evidentiary: people who write terse commit messages, who prefer a closed ticket to an open thread, and who understand that a period can carry more weight than a paragraph will recognize the design’s logic. That recognition is not proof of anything. It is just the reason the shirt is legible to this audience at all.

The small print as a test

There is a simple way to check whether the design’s argument holds up for you. Imagine the same word in large type across the chest. It becomes a performance. Imagine it without the period. It becomes a shrug. Imagine it with an illustration. It becomes a meme. The current combination — small, lowercase, centered, punctuated — is the only version that reads as a finished thought rather than an invitation to comment.

That is a design judgment, and you can disagree with it. You might find the scale too subtle, or the period too fussy. But the judgment is at least about the object in front of you, not about a mood the object is supposed to produce. The shirt is not asking you to feel meh. It is showing you what meh looks like when someone bothers to punctuate it.

Editorial note: This publication and Quirky Cotton Collective share an owner.

The shirt does not show a notebook. It shows a rectangle printed to look like one: a black-and-white speckled field, a dark binding strip down the left edge, and a white ruled label at the top. Inside that label, the word COMPOSITION sits above an outlined ghost and an outlined pumpkin. The garment is a printed notebook cover, not a physical notebook, and the label is the part I keep returning to.

Most group Halloween shirts announce the joke in a sentence. This one withholds it. The only word on the design is a category heading, the same word printed on millions of school notebooks. The ghost and pumpkin are drawn as line art inside the label, small enough that from a few feet away the shirt reads as stationery rather than costume. That restraint is the argument: the design asks you to recognize a familiar object before it tells you what season it is.

I am not going to claim the shirt demonstrates anything about writing, teaching, or software. It is a printed garment. But the way it uses a label is worth reading closely, because labels are how institutions ask us to trust a surface. A composition notebook label tells a student what kind of book this is. It does not tell you what is inside. The shirt borrows that authority and then puts a ghost in the box.

What the label is doing

The word COMPOSITION is not decorative. It is a classification. On an actual notebook, that label distinguishes a composition book from a spiral notebook or a binder. It is a small piece of institutional shorthand, printed in a standard place, doing a standard job. When the same label appears on a shirt, the classification is displaced. The garment is not a composition book. The label is still doing its old job on a new surface.

That displacement is the whole design. The speckled cover and the binding strip establish the object; the label names it; the ghost and pumpkin quietly change the category from school supply to Halloween costume. The design does not need a slogan because the label already carries the recognition. A shirt that said Teacher Halloween Group Costume in large letters would be doing the work the label does more efficiently.

This is a useful distinction for anyone who writes instructions, diagrams, or interface copy. A label is a promise about category. It says: this is the kind of thing you already know how to handle. The shirt keeps that promise visually and breaks it semantically. You know how to handle a composition notebook. You do not know how to handle a ghost in the label. The small mismatch is the joke, and it works because the label is otherwise accurate.

Why the ghost and pumpkin are inside the label

The outlined ghost and pumpkin sit within the white ruled area, not floating on the speckled cover. That placement matters. If the ghost and pumpkin were printed across the black-and-white field, the shirt would read as a Halloween design that happens to use notebook texture. Inside the label, they read as entries: something written on the line where a name or subject would go.

I read that as a quiet visual argument about where seasonal decoration belongs. The label is the part of the notebook meant to be filled in. Putting the ghost and pumpkin there treats Halloween as a notation rather than an overlay. The design is not pasting a holiday onto a school supply. It is writing the holiday into the supply’s own field.

That is an interpretation, not a historical claim. I have no evidence about the designer’s intent, and the retail listing does not supply one. What I can say is what the image shows: a label headed COMPOSITION, ruled lines, and two outlined figures inside the ruled area. The rest is reading.

The group-costume problem

The listing title includes Teacher Group Halloween, and the design makes sense in that context. A group costume needs a shared visual that reads across a room without requiring each person to explain it. A printed notebook cover does that. The speckled field and dark binding strip are recognizable at a distance; the label and its small figures reward a closer look. The shirt does not depend on a caption to function as a group marker.

That is a different design problem from a slogan shirt. A slogan has to be read. A notebook cover has to be recognized. Recognition is faster and survives worse lighting. For a group costume worn in a school hallway or a staff room, that is the relevant virtue. The design is not trying to be clever in a way that requires explanation. It is trying to be identifiable in a way that does not.

I would not describe this as a security lesson. It is a design observation: the shirt uses a classification label as its primary visual, and the label does the work that a caption usually does. That is worth noticing because so much printed clothing relies on text to carry the joke. Here the text is a category, and the joke is the category’s contents.

What the shirt is not

The shirt is not a physical notebook, and the printed label does not make it one. It is not a writing surface. It does not improve teaching, group coordination, or Halloween. It is a garment with a printed design, and the design is legible in the supplied retail image. I have not worn it, tested it, or observed a group wearing it. The observations here are visual, drawn from the artwork as described in the listing.

That limitation is worth stating plainly because the design invites a kind of overreading. A notebook-cover shirt can look like a comment on paperwork, on school bureaucracy, or on the difference between appearance and function. It may be any of those things to a wearer. What the image supports is narrower: a speckled cover, a binding strip, a ruled label headed COMPOSITION, and an outlined ghost and pumpkin inside it. The rest is what a reader brings.

The useful question

If you are considering the shirt, the question is not whether it is clever. The question is whether the label reads at the distance you need it to. The word COMPOSITION is the smallest text on the design, and it is the part that carries the recognition. At a group event, that may be enough. At a distance, the speckled field and binding strip do most of the work, and the ghost and pumpkin become a detail for people standing close.

That is a reasonable design trade. It rewards proximity without failing at distance. The shirt is available as a standard t-shirt through the listing: Composition Notebook Costume Teacher Group Halloween. The design is the argument, and the argument is that a familiar label can carry a seasonal joke without a caption. Whether that works for your group is a judgment about reading distance, not about the shirt’s quality.

Editorial note: This publication and Quirky Cotton Collective share an owner.

You have a deadline. A source needs to send documents before a procurement hearing closes. A colleague is about to hand over credentials before a patch window opens. You are both on Signal, and you want to know that the conversation is the one you think it is. The safety number is the tool for that, and comparing it in person takes less time than reading this paragraph aloud.

But the safety number is also the most misunderstood screen in the app. People treat a match as proof of identity and a change as proof of an attack. Neither is true. This article walks through what the number represents, how to compare it face to face, and how to read a change without either panicking or shrugging it off.

What the safety number actually is

Signal’s own documentation describes the safety number as a per-conversation value, not a per-user one. Each party sees a single string of numbers for the conversation, and comparing them is the verification step. Signal introduced this design in 2016 specifically because the older per-user fingerprint model confused people and produced false positives and false negatives in user studies (Signal, “Safety number updates,” 17 November 2016).

Underneath, the number is derived from the identity keys that each side uses in the key agreement. Signal’s X3DH specification states that parties may compare their identity public keys through an authenticated channel, “for example, they may compare public key fingerprints manually, or by scanning a QR code,” and that the methods for doing so are outside the specification’s scope (Signal, X3DH Key Agreement Protocol, Revision 1, §4.1). The same section is blunt about the consequence of skipping this step: “If authentication is not performed, the parties receive no cryptographic guarantee as to who they are communicating with.”

That sentence is the whole argument for verification. Encryption protects the content of messages in transit. It does not, by itself, tell you that the key your app received for your contact belongs to your contact rather than to someone who substituted a key along the way. The safety number comparison is the out-of-band check that closes that gap.

Why in-person comparison is the strongest option

Any comparison over a channel that could itself be compromised inherits that channel’s weaknesses. Comparing numbers over the same Signal thread is circular. Comparing them over email assumes the email account is the right person’s. Comparing them in person removes the middleman from the comparison itself: you are looking at the other person’s screen, or scanning their code, with your own eyes.

Signal’s 2016 post describes the in-person flow as a single QR code scan rather than the older two-scan dance: “for in-person comparisons, there is only a single QR code to scan, rather than each party having to both scan and be scanned by the other as before” (Signal, 2016). The post also notes that the QR code was changed to contain only the safety numbers themselves, after users published screenshots that embedded phone numbers.

One caveat on procedure: the exact menu labels in the current app are not something this article can assert from a primary source. Signal’s public support article on safety numbers was not retrievable for this piece, and the 2016 post describes an older interface. The reliable description is the one Signal’s own specification gives: open the conversation, view the safety number, and compare it by scanning the QR code or reading the digits aloud. If the labels on your screen differ from what you remember, follow what the app shows; the cryptographic operation is the same.

A practical in-person procedure

1. Open the right conversation. Confirm on both devices that you are looking at the same contact thread. This sounds trivial; it is the most common source of error.
2. Open the safety number screen from the conversation’s contact or conversation info.
3. Compare. Either scan the other person’s QR code with your camera from within that screen, or read the digit groups aloud and have the other person confirm each group. Do not read from a screenshot sent over Signal; that defeats the purpose.
4. Mark the contact as verified if the app offers that control. This is what lets Signal warn you later if the number changes.
5. Write down the date in whatever log your team keeps. Verification is a recurring practice, not a ceremony you perform once and forget.

Remote verification, and the mistake almost everyone makes

If you cannot meet, use a channel you already trust for that person: an email thread you have used before, a phone call to a number you already had, a video call where you can see their face. Send the safety number through that channel and compare.

Here is the trap. Both parties see the same safety number for the conversation. If you send yours first, the other person can simply read it back to you, and you will have verified nothing. The person doing the verifying should wait for the other party to send the number independently through the trusted channel, then compare it to what their own screen shows. A third-party guide makes this point directly: “Both parties in a Signal conversation have the same Safety Number, so if you send it first, the other person can simply read it back to you” (Techlore, “How to Verify Signal Safety Numbers”).

This is a recommendation about procedure, not a claim from Signal’s documentation. It follows from the fact that the number is symmetric. Treat it as a rule of thumb: the party with the higher stakes in the conversation should be the one receiving the number, not sending it.

What a changed safety number means

Signal’s 2016 post is explicit that keys change routinely: “People’s Signal keys change every time they get a new phone or reinstall the app” (Signal, 2016). The same post describes the introduction of an advisory mode in which a key change displays a notice in the conversation history but does not block messages, with manual approval available as an option. That was the state of the rollout in 2016; the current default is not something this article can assert without a current official support page.

What follows from the documented behavior is a simple rule: a changed safety number is a prompt to re-verify, not a conclusion of compromise. The most common causes are a new device, a reinstall, or a SIM transfer. A third-party guide puts it plainly: “This doesn’t automatically mean something is wrong. Most Safety Number changes are completely innocent: your contact got a new phone. But it does mean you should re-verify before continuing any sensitive conversation” (Techlore). An AboutSignal knowledge base entry makes the same point and adds a useful qualifier: frequent or unexpected changes may indicate something is going on (AboutSignal).

So the correct response to a change is neither panic nor dismissal. It is a short, calm sequence:

1. Pause sensitive traffic in that conversation. Do not send the document, the credential, or the source’s identity until you have re-verified.
2. Contact the person through a separate channel you already trust, and ask whether they changed devices, reinstalled, or transferred a SIM.
3. Re-verify using the in-person or remote procedure above.
4. If the explanation does not fit — the person says nothing changed, or the change recurs without explanation — treat the conversation as untrusted until you can verify in person or through a channel you are certain of.

That last step is a judgment call, not a documented Signal behavior. It is the reasonable response when the documented explanation (device change) does not match what the person tells you.

What verification does not prove

This is the part that matters most for journalists, activists, and small-business owners who are used to thinking in terms of identity.

A matching safety number does not confirm that the person you are talking to is who they claim to be in the real world. It confirms that the Signal conversation you are in is cryptographically tied to the same identity as the person you verified through the other channel. The trust in the human still has to come from somewhere else. As the Techlore guide puts it: “Matching Safety Numbers doesn’t prove the person emailing me is who they claim to be… What it does prove is that the Signal conversation I’m in is cryptographically tied to the same identity as whoever sent that email.”

Signal’s X3DH specification adds a related limit. Authentication as described in §4.1 “does not necessarily prevent an ‘identity misbinding’ or ‘unknown key share’ attack,” in which an attacker presents one person’s key as their own and forwards messages (X3DH, §4.8). Including more identifying information in the associated data makes this harder, but the specification is clear that it does not eliminate the risk.

Verification also does not protect against a compromised device. If malware is reading your screen, the safety number match is irrelevant. It does not protect against a coerced unlock. It does not tell you whether the person on the other end is acting under duress. Those are threat-model questions that a number comparison cannot answer.

A pre-switch checklist for small teams

The most common way a safety number change becomes a crisis is that nobody warned anyone. A five-minute routine before a device switch prevents most of it. This checklist is a recommendation, not a documented Signal procedure, but each step follows from the documented behavior above.

• Before switching: verify safety numbers with the contacts who matter most, and note the date.
• Before switching: tell those contacts, through a separate trusted channel, that you are changing devices and that they should expect a safety number change.
• During setup: if the app offers an account transfer or restore flow, use it. A fresh registration without transfer generates new identity keys; a transfer carries them over. This distinction comes from a third-party guide, not a retrieved official page, so confirm the current flow in your app before relying on it.
• After switching: re-verify with the same contacts, in person if possible.
• Always: keep a secondary safe channel established with anyone you communicate with sensitively, so you have somewhere to check in if something unexpected happens.

What to do today

Pick the one conversation where a substituted key would actually hurt: the source, the lawyer, the accountant, the co-founder. Open it, view the safety number, and compare it in person or through a channel you already trust. Mark it verified. Write the date down. That is the whole task, and it takes less time than the meeting you are about to join.

Then, before your next device switch, send the heads-up message. The worst time to discover that your re-verification process is unclear is after your contacts are already staring at a changed number and wondering what it means.

Frequently asked questions

Does a changed safety number mean I have been hacked?

No. Signal’s own documentation says keys change when people get a new phone or reinstall the app (Signal, 2016). A change is a prompt to re-verify, not proof of compromise. Frequent or unexplained changes are a reason to slow down and check through another channel.

Can I verify by sending my safety number over Signal itself?

No. Both parties see the same number, so sending it over the same channel proves nothing. Use a channel you already trust for that person, and let the person doing the verifying receive the number rather than send it first.

Does a matching safety number prove who the person is?

No. It proves that the Signal conversation is tied to the identity you verified through the other channel. The trust in the human comes from that other channel, not from the number.

What if I cannot meet in person?

Use an already-established channel: an email thread you have used before, a phone call to a number you already had, a video call where you can see the person. The strength of the verification is the strength of that channel.

Where can I read the primary documentation?

Signal’s X3DH specification is at signal.org/docs/specifications/x3dh/. Signal’s 2016 post on safety number updates is at signal.org/blog/safety-number-updates/. Both are worth reading alongside this article; the first explains what the comparison authenticates, and the second explains why the interface looks the way it does.

The shirt shows four words in white capitals — I HAD POTENTIAL — above a white curved ramp that descends from left to right. At the upper left, on the raised ledge, sits a dashed empty circle. At the lower right, on the flat ledge, rests a solid white ball. The ramp is curved, not a straight diagonal. That curve matters, because it turns the drawing into a diagram of a particular kind of failure: not a fall, but a roll that was always going to end where it ended.

I want to read that drawing closely, because the joke only works if you notice what the dashed circle is doing. The phrase I had potential is a familiar piece of self-deprecation. The diagram underneath it is doing something more specific. It is a physics sketch, and the sketch has a before and an after. The dashed circle is the before. The solid ball is the after. The ramp is the interval between them, and the shirt asks you to supply the rest.

What the dashed circle actually says

In technical drawing, a dashed outline usually marks something that is not there: a hidden edge, a projected position, a part that has been removed or has not yet arrived. Here the convention is doing comic work. The dashed circle at the top of the ramp is the ball at the moment it still had height — the stored energy, the position of advantage, the version of the object that had not yet been released. The solid ball at the bottom is the same object after the roll. Nothing has been added or destroyed. The ball has simply moved from a place of possibility to a place of rest.

That is a more precise joke than I had potential on its own. A plain slogan would say: I was promising, and now I am not. The diagram says: the promise was a position, and positions are temporary. The dashed circle is not a ghost or a regret. It is a technical notation for this is where the object used to be. The shirt is not mourning the ball. It is labeling the trajectory.

I read the curved ramp as the key detail. A straight diagonal would suggest a slide, a skid, something that could have been arrested by friction or a hand. A curve suggests a track — a path with a shape, a route the ball was always going to follow once it was placed at the top. The drawing does not show a push, a slip, or an accident. It shows a starting condition and an ending condition, and it leaves the cause off the shirt. That omission is the joke. The ball did not fail. The ball was released.

The difference between a slogan and a diagram

Most sarcastic shirts stop at the sentence. This one keeps going, and the extra layer is what makes it worth reading rather than just wearing. The words make a claim about the self. The drawing makes a claim about how the self got there. The two claims are not identical, and the gap between them is where the humor lives.

If the shirt said only I had potential, the reader would have to guess whether the speaker is bitter, resigned, or joking. The diagram removes some of that ambiguity. It says: the potential was real, it was located somewhere specific, and it was converted into motion along a path. That is a description of a process, not a verdict on a person. The shirt is closer to a lab note than to a confession.

This is also why the design reads as minimalist rather than busy. There is no clutter, no extra caption, no arrow labeled gravity. The white-on-dark palette and the plain capitals keep the focus on the relationship between the two circles. The shirt trusts the viewer to recognize the convention of the dashed outline and to complete the diagram in their head. That trust is part of the appeal. It is a small piece of visual literacy disguised as a joke.

What the shirt does not claim

I want to be careful here, because it would be easy to overread the drawing. The shirt does not demonstrate a physics result. It does not show a measured coefficient of friction, a calculated velocity, or a real track. It is a cartoon that borrows the visual grammar of a physics diagram — the ramp, the ball, the dashed projection — to make a point about expectation and outcome. The curve is a drawing choice, not data. The dashed circle is a convention, not a measurement.

That distinction matters for anyone who works with technical language. A diagram can look authoritative while making no claim at all. This one is honest about being a joke, but it is also a useful reminder that the visual vocabulary of science is easy to borrow and hard to earn. The shirt borrows it well. It does not pretend to be a lab report, and I would not cite it as one.

What the shirt does claim is smaller and more interesting: that potential is a word with two lives. In everyday speech it means promise, a quality a person carries. In physics it names a condition of a system — energy stored by position, waiting to be converted. The shirt puts both meanings on the same garment and lets the drawing show the conversion. The pun is not just verbal. It is structural. The dashed circle is potential in the physics sense. The solid ball is what happened to it.

Why the terse version works better than a paragraph

There is a temptation, with a design like this, to add a caption that explains the joke. The shirt does not. It gives you four words and a drawing, and it stops. That restraint is what makes the design usable as an off-duty object rather than a novelty. A shirt that explains itself is a shirt you read once. A shirt that leaves the last step to you is a shirt you can wear into a room without it doing all the talking.

I think that is the real argument of the piece. The drawing is not just a vehicle for the sentence. It is a second sentence, written in a different language, and the two sentences are in productive tension. The words are first-person and past tense: I had. The diagram is impersonal and present: a ball, a ramp, a dashed outline. Together they say something the words alone could not: that the distance between having potential and using it is often just a slope, and that the slope has a shape.

If you want the object itself, the listing is here: I Had Potential Funny Physics Pun Sarcastic Minimalist Quote. The design is the white capitals and the curved ramp with the dashed circle at the top and the solid ball at the bottom. That is what you are reading. Everything else is interpretation, and I have tried to keep the two separate.

Reading the shirt as a small exercise in verification

My usual work is about checking claims against documents. This shirt is not a security artifact, and I am not going to pretend it is. But it rewards the same habit: look at what is actually drawn before you decide what it means. The dashed circle is not a hole. The solid ball is not a failure. The ramp is not a straight line. Each of those details changes the reading, and each of them is visible if you slow down.

That is the test I would apply to any object with a message on it. Does the design survive being looked at closely? Does it say something more than the words? Does it leave you with a question rather than a conclusion? This one does. The question is not did the ball have potential — the dashed circle answers that. The question is who drew the ramp, and the shirt, wisely, does not say.

Editorial note: this publication and Quirky Cotton Collective share an owner.