4 ms·
It isn't an optional feature. If you decide not to create a pin one is created for you and your data is still uploaded to the cloud. See: https://web.archive.o
by autoexec 2mo ago
It isn't an optional feature. If you decide not to create a pin one is created for you and your data is still uploaded to the cloud.
See: https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ https://web.archive.org/web/20230616082821/https://old.reddi...
https://signal.org/blog/sealed-sender/ https://signal.org/blog/sealed-sender/ says "By design, it does not store a record of your contacts, social graph, conversation list, location, user avatar, user profile name, group memberships, group titles, or group avatars."
However, today the reality is that signal collects your name, photo/avatar, and your contacts and stores it forever in the cloud.
- Cider9986 2mo agoThey can't view it though.
- autoexec 2mo agoThey (and anyone else) can access that information if they know/guess/brute force the pin. It can also be accessed it by pulling it out of SGX either through the use of an exploit (There are many many documented examples of successfully attacks on SGX, including examples which specifically targeted Signal's data) or though the use of a built-in backdoor (held by either Intel or the government) as well by other side channel attacks on the cloud servers themselves. When Signal's rule was "We don't collect and store data period" no one had to worry about any of that. That's no longer the case.