4 ms·
This really worries me: now the safety of my data hinges on Intel's remote attestation and a password I can remember.
by zeveb 6y ago
This really worries me: now the safety of my data hinges on Intel's remote attestation and a password I can remember.
- MattGaiser 6y ago> and a password I can remember. This is going to be the reality of any data system which you want to have complete control over. I suppose it could also be a complex key you instead keep on your drive, but that has risks as well.
- RL_Quine 6y agoThe previous status quo was that nobody had the data other than your device.
- zeveb 6y agoMaybe I should have been more explicit: the safety of my data at rest on a remote system hinges on Intel's oft-broken security code and a memorable password. Normally I use 128-bit passwords (i.e., 22 mixed-case letters and digits) for any remote system. That's not really practical for something which prompts me to enter the PIN periodically (and I think Signal limits the PIN to 20 characters anyway). I do not see any net benefit to storing my contact information on Signal's servers. If I want to rebuild my contact list, I can … ask my contacts for their Signal accounts.
- Skunkleton 6y agoTo be fair, you don't need to remember the password unless you lose your phone...won't stop the nagging though.
- thanksforfish 6y agoThis is a huge shift in the trust model... I'm not happy.