Am I tripping or if you upgrade Signal Desktop, it saves all your messages in plain text (messages.json) + attachments locally so you can re-import them in the newer version? #fail #wtf
Show this thread
There is no magical pixie dust encryption algorithm that will protect your messages in such a way that whatever new version of Signal can access them but no other app or user can (on a desktop). If you have local access it's game over.
-
-
Android is different, because all apps have access to external storage, but per-app storage is isolated. This is why Signal Android encrypts its backups, since those backups *become* accessible to other apps, while active app data storage isn't.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
any such challenge can be resolved by a dev who actually takes time to address it
-
Security is more than just the dev's job. How would a dev account for me giving out my passwords to everyone?
- Show replies
New conversation -
-
-
How about a non-magical average good encryption scheme where messages stores are encrypted using a password as salt? I don't know why you need to be condescending or exasperated about something as basic as encryption at rest.
-
What's the point? So you save the messages encrypted, import them, and then what? They're going to be decrypted to be useful, with credentials that any other app can hijack out of the running Signal instance even if they're encrypted "at rest".
- Show replies
New conversation -
-
-
Translation from sarcasm: "On desktop, there is no encryption that will protect your messages in such a way that no other app or user can access them."
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
You're painting a picture of a desktop system which is locally insecure, saying you might as well not encrypt, and then describing an Android storage space which is locally insecure and which therefore needs to be encrypted.
-
Android has insecure *storage*. A desktop has insecure *everything* (unless you use user separation, but then other users shouldn't be able to access the backup file anyway).
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.