7 ms·
I’m really tired by FUD spread by Signal’s executives when they literally do not care about usability or client side security; - if you use iOS, and actually u
by aaomidi 2y ago
I’m really tired by FUD spread by Signal’s executives when they literally do not care about usability or client side security;
- if you use iOS, and actually use signal (with history on and everything) transferring to a new phone is a multi-hour amount of work and is not trivial. You need to 1) turn off auto lock, which you may not be able to thanks to MDM. 2) scan QR code and wait hours for data transfer (dependent on your history size).
This means that if you brick your device, trade it in, or whatever, you can’t actually restore your chat history. This entire model is unnecessary and there’s plenty of ways to improve this.
- on Linux devices, and possible more (not an issue on macOS) the chat history is stored in a flat file owned by your user. I’m not going to sit here and say the keyring provided by your DE/WM is great, but it should still be used here. Mainly because as those keyrings improve, the rising tide improves everything else. As it stands today, literally any application running as user level permissions can read your signal encryption keys. You don’t even really have a way to rotate those keys.
Signal, please. I want to like you. Please focus on usability and actual security instead of the constant hit pieces against telegram. It just looks petty. It also looks like you’re angry that telegram’s crypto is actively taking off while yours failed.
- palata 2y agoDo I understand correctly that you are complaining about Signal as a protocol by mentioning the export feature on iOS and the encryption at rest on Linux? No offense, but to me it sounds like Whittaker complains about the bad encryption in transit (i.e. "the Telegram server can read your messages") and your answer is "that's FUD, because exporting on iOS is annoying and if your Linux is compromised, then your Linux is compromised"? I mean sure, you can like Telegram better because you love stickers and whatnot, but how can you call that "actual security"?