3 ms·
PIN only stops registration for a fixed amount of time, believe 7-days, then the entity controlling the number would be able to reclaim the account. If the “at
by billme 6y ago
PIN only stops registration for a fixed amount of time, believe 7-days, then the entity controlling the number would be able to reclaim the account. If the “attacker” maintained control, new devices that add the number from their contact list would get no alert; that is, the users would have to figure out the number is controlled by someone else.
- ikawe 6y agoThat’s 7 days since last use. So if you continue to use the app at least once every 7 days, it will remain registration locked. Also, anyone who had communicated with you before the switch would see a “safety number changed” notification if the number became affiliated with a new device.
- billme 6y agoCurious, where’s the “last use” in the documentation or code? Ask because I have seen other issues with the PIN vs docs and haven’t gotten to testing the recovery mode. EDIT: Found the related docs, appears they had been edited since I lasted looked at them; for example, you can now disable PIN reminders: https://support.signal.org/hc/en-us/articles/360007059792-Signal-PINs https://support.signal.org/hc/en-us/articles/360007059792-Si... And yes, “anyone who had communicated with you before the switch would see a ‘safety number changed’ notification if the number became affiliated with a new device” is correct, though so is my statement about new numbers adding the number. To be honest, I have caused the alerts to happen before, the other user had no idea what they meant, didn’t say anything, just clicked okay.