For instance, this particular conversation is permanently on 1-day "disappearing" expiry, but 4-day-old notifications exist.pic.twitter.com/u81zw7V5uR
Show this thread
#HEADSUP: #Security Issue in #Signal. If you are using the @signalapp desktop app for Mac, check your notifications bar; messages get copied there and they seem to persist — even if they are "disappearing" messages which have been deleted/expunged from the app.pic.twitter.com/CVVi7rfLoY
-
-
-
Before anyone asks: I am not expert enough in MacOS internals to know whether switching off Notifications for
@signalapp on MacOS actually quenches the information leak, or merely sweeps it under the carpet as unrendered. I just found this.Show this thread -
Me details: Running MacOS 10.13.4 and Signal Desktop 1.9.0
Show this thread -
Question for any MacOS experts: are there any other caches or message-buses which might harbour copies of the plaintext, in need of scrubbing?
Show this thread -
Question for users: does leaking the message plaintext into MacOS notification infra, somehow "break" the principle of End-to-End Encryption? It's a sensitive matter which is partly why
@Messenger "Secret Conversations" is extra-careful about leaks-via-notificationShow this thread -
[ remembers happy days arguing with
@JonMillican and@tonyleachsf about whether FBMSC should be equipped with distinctive ringtone/alert sounds; eventually decided that that would be tipping-off... ]Show this thread -
Welcome to 2018 where one can go from "Oh shit, that looks wrong…" to media interviews in under 40 minutes.
Show this thread
End of conversation
New conversation -
-
-
This reminds me of when slack notification would show on the lock screen. Absolutely bonkers.
-
And
#Skype messages, likewise
End of conversation
New conversation -
-
-
Signal desktop app is also based on an insecure Electron runtime. See my report here:https://github.com/signalapp/Signal-Desktop/issues/1635 …
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Here's another variant of this same problem, reported 7 weeks ago. How did you get them to pay attention to you?https://twitter.com/ksvafed/status/975433698693836800 …
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
this is why you should disable *most* notifications
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Have you checked the Notification Log on Android as well? I don't personally use Signal, but I could see that being an issue.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.