4 ms·
It’s better than before, where all that stuff was available in plaintext
by Ar-Curunir 5y ago
It’s better than before, where all that stuff was available in plaintext
- milkey_mouse 5y agoSignal didn't back up contacts and settings to their servers until they implemented "Secure Value Recovery", which relies on SGX to rate-limit guesses of a weak PIN. If SGX is broken and Signal's database falls into the wrong hands, encryption keys could be brute-forced pretty quickly (most people have 4-digit PINs).