Conversation

Making fun of your user’s concerns, great marketing strategy!

Quote Tweet

Jul 10, 2020

The latest beta releases of Signal for Android and iOS let you put a pin in PINs and disable them completely. This option is for advanced users who don’t want to lose their ability to lose everything.

Replying to

By the way, it's implemented by generating a high entropy random PIN on your behalf. Doesn't really address the concerns which are that they're encouraging users to use a weak PIN and registration lock was gobbled up into a feature that does sync based on the PIN...

Replying to

and

I already did something similar to this opt-out by setting a long random passphrase. Most people are going to use a weak PIN. They explicitly state that they're willing to encourage weak PINs due to SGX. It doesn't just rely on SGX but SGX *attestation* based on a root of trust..

5:49 PM · Jul 10, 2020Twitter Web App

Retweet