111–120 of 329 posts
You can check for unexpected linked devices in the settings menu.
Earlier quoted context omitted.
Following the conversation down, it sounds like what you're really saying is that Signal stores sensitive information encrypted with PIN+SGX, which is controversial. And maybe you have a good argument for why it's bad (and I'm uneasy with it myself). But I think people don't like that you made the assumption for them that PIN+SGX is bad.
Even if everyone agreed that the system was secure, and they absolutely don't, see for example https://web.archive.org/web/20210126201848mp_/https://palant... https://www.vice.com/en/article/pkyzek/signal-new-pin-featur... I think we should all agree that outright lying to users on the very first line of their privacy policy page is totally unacceptable.
"Signal is designed to never collect or store any sensitive information."
I interpret this, I think reasonably, to not include encrypted information. For that matter they collect (but probably don't store) encrypted messages. The question is, does PIN+SGX qualify as sufficiently encrypted? This line is a lie only if it does not.
Sorry I skimmed those articles, I don't want to read them in depth. But it sounds like they are again ultimately saying "PIN+SGX is not secure enough".
Earlier quoted context omitted.
[flagged]
Interesting. Could you provide a better alternative? Preferably even remotely as user friendly as signal/whatsapp?
I'd love to have more of my socializing happening on Signal. Anyone got a good way to convince the non-paranoid to use it?
- install [the thing]
- start it, show how it works
- search for yourself, start a convo, exchange messages
- add them to the group
IME the friction comes from having to do the first step, because it's really an annoyance no one cares about, so if you take it for yourself and do it they'll like that
They provided some domains, but not all of them are taken. For example, signal-protect[.]host is available, kropyva[.]site is available, signal-confirm[.]site is registered in Ukraine. Some of them are registered in Russia. Never trust a country at war—any side. Party A blames B, Party B blames A, but both have their own agenda.