3 ms·
the recommended fix here is to add a PIN + enable registration lock IIRC signal PIN was very controversial back in the day because they were 1) forcing users t
by awinter-py 4y ago
the recommended fix here is to add a PIN + enable registration lock
IIRC signal PIN was very controversial back in the day because they were 1) forcing users to do it and 2) forcing them to opt in to some data collection as part of creating a PIN. Signal backed down on requiring a PIN, but now it's unclear from their settings page whether setting a PIN will share data as well. The marketing copy on my droid device says:
> PINs keep information stored with signal encrypted so only you can access it. your profile, settings and contacts will restore when you reinstall
For a company with relatively good cred, this is a shady way of saying 'we will upload your contacts and encrypt it with a short string'
- uneventual 4y agoThey do some monkey business with sgx to make brute forcing harder but yeah it's worrisome. https://blog.cryptographyengineering.com/2020/07/10/a-few-thoughts-about-signals-secure-value-recovery/ https://blog.cryptographyengineering.com/2020/07/10/a-few-th... https://signal.org/blog/secure-value-recovery/ https://signal.org/blog/secure-value-recovery/
- dvzk 4y agoFrom my 5-minute reading of the Signal source code it seems that disabling the PIN results in the generation of a random 256-bit master key for cloud storage encryption: https://github.com/signalapp/Signal-iOS/blob/main/SignalServiceKit/src/Util/KeyBackupService.swift#L356 https://github.com/signalapp/Signal-iOS/blob/main/SignalServ... The primary developer has stated previously that cloud storage is still used even with the PIN disabled: https://community.signalusers.org/t/beta-feedback-for-the-upcoming-android-4-66-release/15579/61 https://community.signalusers.org/t/beta-feedback-for-the-up...
- deleted 4y ago[deleted]