3 ms·
Hi! Some of my peers have enabled Signal PINs when the feature was introduced, and they have used weak PIN codes that they could remember on the spot, because i
by dessant 6y ago
Hi! Some of my peers have enabled Signal PINs when the feature was introduced, and they have used weak PIN codes that they could remember on the spot, because intially the app would not let them view their messages until the Signal PIN was configured, which was later fixed in an app update.
What is the real-world impact of a weak Signal PIN code? Can a compromised Intel SGX process or the Signal server intercept our messages, if the PIN code is known?
- tptacek 6y agoNo, even with a compromised PIN and an SGX break, attackers can't recover messages. The PIN (and SGX) protects your contact list, something other messengers (like Wire) tend to simply keep in plaintext databases.
- codethief 6y agoThis might change, though, because AFAIR Moxie said that they were looking into using Secure Value Recovery for message synchronizing between different clients (mobile, desktop), too.