4 ms·
You can't actually assert that. You have to hope that they or someone else hasn't found an SGX weakness: https://www.vice.com/en/article/pkyzek/signal-new-pin-
by gaganyaan 2y ago
You can't actually assert that. You have to hope that they or someone else hasn't found an SGX weakness:
https://www.vice.com/en/article/pkyzek/signal-new-pin-feature-worries-cybersecurity-experts https://www.vice.com/en/article/pkyzek/signal-new-pin-featur...
- fragmede 2y agoThat article doesn't contradict that. Signal's new feature is to store users' address book on their servers. That's not great in the case of an SGX break, but that's not the same thing as Signal mitm-ing messages.
- 1oooqooq 2y agothe lack of awareness in this thread... the pin/number-as-id is just the cherry on top. we know nothing about signal infra or why the server code is closed. for all i know mox have the root password on a post it and it's MitM from day one. also they boast about things being easy to verify on client but the default client doesn't and they are very against custom clients... which is very schizophrenic
- fragmede 2y agoThe client code is available though, and that's what's needed to verify that it's not MitM'd. If there's something you'd like to make me and others aware of, I'm all ears. Otherwise you're just casting baseless aspersions.