3 ms·
That was my thought when he suggested using Signal. Sure it might be secure now but we have no clue if / when the app is infiltrated or even worse, could be sp
by madamelic 10y ago
That was my thought when he suggested using Signal.
Sure it might be secure now but we have no clue if / when the app is infiltrated or even worse, could be spoofed and have a bad app pushed to our phones.
(Don't hang me. Just off the cuff idea, I have no clue if it is completely possible to do such a thing but it seems within the realm of possibilities)
EDIT: On second thought, don't you have to sign apps with a private key? I assume that raises the bar a bit, as long as the devs can keep those keys private which seems reasonable enough for such an app.
- EuAndreh 10y agoOf course, signing is another thing to consider. However, when the author suggests using FileVault, it shows that he doesn't consider the implications of installing a proprietary software, or using a proprietary OS.
- unhammer 10y agoActually, Signal is one of the few apps where you can verify that the binary is produced by the source you have: https://whispersystems.org/blog/reproducible-android/ https://whispersystems.org/blog/reproducible-android/