2 ms·
> there are multiple open-source implementations No. Signal locks not not just third party software but also builds of their own "open source" code via timebo
by nullc 2y ago
> there are multiple open-source implementations
No. Signal locks not not just third party software but also builds of their own "open source" code via timebombed forced updates. It's somewhat impractical to use signal except via blinding accepting updates from them.
As a result every signal user is sadly quite vulnerable to getting pushed a bad update, particular since app store policy changed to require the app store itself being able to sign updates.
Signal could mitigate this by allowing third party clients and/or not timebombing support.