3 ms·
At this point that's entirely unclear. Because they're keeping your data in the cloud my guess is that the US government can easily access that data and any oth
by autoexec 3y ago
At this point that's entirely unclear. Because they're keeping your data in the cloud my guess is that the US government can easily access that data and any other government can get anyone's data as long as they can guess the person's PIN. You can find a discussion on the problems with their security here: https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 https://community.signalusers.org/t/proper-secure-value-secu...
- egberts1 3y agoRequired reading: https://eprint.iacr.org/2016/1013.pdf https://eprint.iacr.org/2016/1013.pdf
- fsflover 3y agoThe parent is right: https://news.ycombinator.com/item?id=39414322 https://news.ycombinator.com/item?id=39414322
- autoexec 3y agoThat was before they started collecting and storing sensitive data in the cloud. See https://sgaxe.com/files/SGAxe.pdf https://sgaxe.com/files/SGAxe.pdf for an attack that leaked Signal contacts.