Am I tripping or if you upgrade Signal Desktop, it saves all your messages in plain text (messages.json) + attachments locally so you can re-import them in the newer version? #fail #wtf
-
-
Replying to @msuiche
There is no magical pixie dust encryption algorithm that will protect your messages in such a way that whatever new version of Signal can access them but no other app or user can (on a desktop). If you have local access it's game over.
5 replies 1 retweet 12 likes -
How about a non-magical average good encryption scheme where messages stores are encrypted using a password as salt? I don't know why you need to be condescending or exasperated about something as basic as encryption at rest.
1 reply 0 retweets 3 likes -
Replying to @dreamandghost @msuiche
What's the point? So you save the messages encrypted, import them, and then what? They're going to be decrypted to be useful, with credentials that any other app can hijack out of the running Signal instance even if they're encrypted "at rest".
6 replies 0 retweets 3 likes -
Adding obscurity and random encryption isn't security, it's security theater. Users need to be aware of the risks of the software they run and how they run it. Adding more encryption when it doesn't help just *makes people think they're secure* when they aren't.
1 reply 0 retweets 3 likes
The security model on Android is "other apps cannot access Signal messages". The security model on a desktop is "anything you run can access your Signal messages". This is just how it is, by design. No amount of encryption will fix that. Users just need to be aware.
-
-
Yeah, this kinda seems like people are asking this app to solve problems in the realm of bit locker, etc.
0 replies 0 retweets 0 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.