Am I tripping or if you upgrade Signal Desktop, it saves all your messages in plain text (messages.json) + attachments locally so you can re-import them in the newer version? #fail #wtf
Show this thread
-
What's the point? So you save the messages encrypted, import them, and then what? They're going to be decrypted to be useful, with credentials that any other app can hijack out of the running Signal instance even if they're encrypted "at rest".
Adding obscurity and random encryption isn't security, it's security theater. Users need to be aware of the risks of the software they run and how they run it. Adding more encryption when it doesn't help just *makes people think they're secure* when they aren't.
-
-
The security model on Android is "other apps cannot access Signal messages". The security model on a desktop is "anything you run can access your Signal messages". This is just how it is, by design. No amount of encryption will fix that. Users just need to be aware.
-
Yeah, this kinda seems like people are asking this app to solve problems in the realm of bit locker, etc.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.