Am I tripping or if you upgrade Signal Desktop, it saves all your messages in plain text (messages.json) + attachments locally so you can re-import them in the newer version? #fail #wtf
Diesen Thread anzeigen
There is no magical pixie dust encryption algorithm that will protect your messages in such a way that whatever new version of Signal can access them but no other app or user can (on a desktop). If you have local access it's game over.
-
-
Android is different, because all apps have access to external storage, but per-app storage is isolated. This is why Signal Android encrypts its backups, since those backups *become* accessible to other apps, while active app data storage isn't.
Danke! Twitter wird dies nutzen, um deine Timeline zu verbessern. Rückgängig machenRückgängig machen
-
-
-
any such challenge can be resolved by a dev who actually takes time to address it
-
Security is more than just the dev's job. How would a dev account for me giving out my passwords to everyone?
- Antworten anzeigen
Neue Unterhaltung -
-
-
How about a non-magical average good encryption scheme where messages stores are encrypted using a password as salt? I don't know why you need to be condescending or exasperated about something as basic as encryption at rest.
-
What's the point? So you save the messages encrypted, import them, and then what? They're going to be decrypted to be useful, with credentials that any other app can hijack out of the running Signal instance even if they're encrypted "at rest".
- Antworten anzeigen
Neue Unterhaltung -
-
-
Translation from sarcasm: "On desktop, there is no encryption that will protect your messages in such a way that no other app or user can access them."
Danke! Twitter wird dies nutzen, um deine Timeline zu verbessern. Rückgängig machenRückgängig machen
-
-
-
You're painting a picture of a desktop system which is locally insecure, saying you might as well not encrypt, and then describing an Android storage space which is locally insecure and which therefore needs to be encrypted.
-
Android has insecure *storage*. A desktop has insecure *everything* (unless you use user separation, but then other users shouldn't be able to access the backup file anyway).
- Antworten anzeigen
Neue Unterhaltung -
Das Laden scheint etwas zu dauern.
Twitter ist möglicherweise überlastet oder hat einen vorübergehenden Schluckauf. Probiere es erneut oder besuche Twitter Status für weitere Informationen.