Uhg, (Android) has stolen over 20% of my screen real estate with a nag to create a backdoor pin which I DO NOT WANT and there's no apparent way to make the nag go away without doing it. WTF.
Conversation
I previously had a registration lock PIN which prevents hijacking the number via a SIM swap attack, etc. for 1 week. That's helpful since people rarely care about safety number changes... especially since historically they didn't have the encrypted backup / restore feature.
1
They expanded the PIN to enabling contact / settings sync and restore, which I don't want... but it seems the old style registration lock PIN has gone away and I had to migrate to this new system and enable the new toggle for it, even though I already had this set up before.
1
2
Indeed. I do not want any cloud sync of any kind. I will happily backup my device locally via adb if I want backups. The dark patterns by which they're pushing this cloud sync are really disturbing and undermining any trust I had in Signal's management.
1
Signal has a local encryption backup / restore feature. It uses a strong encryption key and has you record a human readable/writable version of it. I'd prefer if it used a seed phrase but it works well. I want my settings / contacts backed up as part of that not via their server.
1
2
Also don't want it protected by a weak PIN with key derivation + SGX voodoo aimed at making it secure. I use the local encrypted backup / restore which has a strong encryption key. I also still want my registration lock PIN which is the only reason I moved to this new system.