Conversation

Making fun of your user’s concerns, great marketing strategy!

Quote Tweet

Jul 10, 2020

The latest beta releases of Signal for Android and iOS let you put a pin in PINs and disable them completely. This option is for advanced users who don’t want to lose their ability to lose everything.

Daniel Micay

@DanielMicay

Replying to

@marver

By the way, it's implemented by generating a high entropy random PIN on your behalf. Doesn't really address the concerns which are that they're encouraging users to use a weak PIN and registration lock was gobbled up into a feature that does sync based on the PIN...

5:42 PM · Jul 10, 2020Twitter Web App

Replying to

and

I already did something similar to this opt-out by setting a long random passphrase. Most people are going to use a weak PIN. They explicitly state that they're willing to encourage weak PINs due to SGX. It doesn't just rely on SGX but SGX *attestation* based on a root of trust..