I can't tell if you're genuinely ignorant or purposefully misrepresenting nearly everything about the issue. It's not a "security vulnerability" in Signal that

I can't tell if you're genuinely ignorant or purposefully misrepresenting nearly everything about the issue. It's not a "security vulnerability" in Signal that the user can install a third party keyboard app that spies on them, even after the OS warns them against that risk, nor is it Signal's fault that keyboard apps are not required to respect the private-mode call/flag an app can use. The only solution to close this hole would be for Signal to implement its own virtual keyboard, which would be a massive undertaking. > They were told repeatedly for a year that Chinese Signal users were vulnerable and needed a warning in the app. They intentionally ignored the problem because the wrong type of person was reporting it. Stop racebaiting - race had nothing to do with it. Naomi Wu threw a profanity-laden, insult-filled temper tantrum because she was apparently the last person on the planet to get the "third party keyboards are insecure" memo, accused Signal of misleading marketing because she wildly misinterpreted it saying it guarantees users privacy, and was outraged the Signal app does not warn people using a non-stock keyboard that their privacy might be violated. She demanded they add a warning. Signal said "not our responsibility to warn users about stuff they've installed" which is a reasonable take, especially since Android OS warns about security risks upon installation of a third party keyboard. Signal is not a vulnerability-scanning tool, it's a messaging app. Moxinspike said he felt Naomi was making a huge scene about it to stir up shit on social media for attention, and I think he's right. Scroll through her twitter feed and you'll see she's like a Singapore version of Briana Wu; just one outrage-bait post after another...and lashing out at other developers, like the first page of her twitter feed; here's her abusively lashing out at the entire Mastodon dev community in a cryptic-passive-aggressive way: https://twitter.com/RealSexyCyborg/status/1589534173928501248 https://twitter.com/RealSexyCyborg/status/158953417392850124... The tweet making fun of the "struggles of e-thots" was particularly rich, too.