Live data from Hacker News

Signal Secure Backups

signal.org

101–110 of 460 posts

Re: Signal Secure Backups

#101
post #62
post #57

Earlier quoted context omitted.

Any backup that needs manual intervention is no backup.

Thought people are talking about backups without a "cloud" involved. So you'd need to manually connect your phone to something...

Wireguard + syncthing (from F-Droid) work fine. Triggering it when the phone is on the charger makes it very easy to sync things from a computer to the phone, while next to the computer.

Re: Signal Secure Backups

#102

> Losing it means losing access to your backup permanently, and Signal cannot help you recover it. Oof... That's going to be tough to explain to normal users. "Sorry you've been paying for backups all this time, but you should have written down this code that you will only ever use once somewhere safe and remembered where it is. All your data is gone." Not the right security trade-off for most people.

If they were able to recover backups for you, then it wouldn't be secure. Right trade-off.

Re: Signal Secure Backups

#103

> Losing it means losing access to your backup permanently, and Signal cannot help you recover it. Oof... That's going to be tough to explain to normal users. "Sorry you've been paying for backups all this time, but you should have written down this code that you will only ever use once somewhere safe and remembered where it is. All your data is gone." Not the right security trade-off for most people.

Absolutely the right security trade-off for Signal users. Anything else would devalue the entire product.

Whatsapp chose a different approach (which is reasonable for their user base) but that means that there is an escrow key. Regardless of your choices, messages that you sent may end up "end to end encrypted" but in reality stored in the cloud with a key escrowed to Meta...

The backup feature seems to be opt-in, i.e. the requirement to write the key down won't be too surprising.

Re: Signal Secure Backups

#104
I would love to switch over to Signal, but the video call quality pales in comparison to WhatsApp and FaceTime. Add to that issues with even sending pictures or videos on Android, and it's a really hard sell.

Re: Signal Secure Backups

#105
post #48

Backing up Signal on Android for free and offline was ~always possible. The app creates a multi GB backup file on the phone memory under the Signal folder that you can just copy out and back on a new phone. The file is encrypted with the passcode and the database can be extracted. https://github.com/bepaald/signalbackup-tools

There are a couple of problems with the existing backup: 1. It is non-incremental. This means you'll need about as much free space on your phone as your Signal database takes, and it may take many hours to make if your database is large (mine is 18GB). I used to wake up to find my phone had not even fully charged because it had been so busy writing Signal backups. 2. Once you have it on disk, how do you get it away f…

> Especially after SyncThing disappeared from Play Store (because it was basically a non-Android app behind a thin Android shell that couldn't easily be upgraded to more modern native APIs), there's nothing super-obvious here.

That's not what happened, it was Google who started rejecting their updates on Play store. I believe the original Android app maintainer quit after that but there's a fork on on F-droid which works perfectly.

Re: Signal Secure Backups

#106
post #8

Wow, maybe as a side effect users will be able to migrate between Android and iOS without losing their message history. Seriously, why is the migration protocol completely different on the two platforms?

Hi there, Signal dev here. The new backup format is indeed cross-platform. I've successfully restored backups on an iPhone, we're just stabilizing things :) If you're curious, the reason that Android's current local backups aren't cross platform is because it was made a long time ago, and it's literally a dump of all the sqlite statements that can be used to recreate Android's sqlite database (encrypted with a strong…

Are there any plans to allow backups to a custom server or another folder?

Re: Signal Secure Backups

#107
post #104

I would love to switch over to Signal, but the video call quality pales in comparison to WhatsApp and FaceTime. Add to that issues with even sending pictures or videos on Android, and it's a really hard sell.

I agree the video call quality needs improvement, but sending photos and videos has always been flawless on Android for me.

Re: Signal Secure Backups

#109

Earlier quoted context omitted.

This BS is why I completely stopped donating to the signal foundation. The messages are mine, not theirs, and yet they refuse to allow me to handle them how I deem fit.

Have you read the article? They are working on it.

Thank you. I should have read to the end, and I'm glad they're planning to support backups stored on their users' media.

Re: Signal Secure Backups

#110
post #48

Earlier quoted context omitted.

There are a couple of problems with the existing backup: 1. It is non-incremental. This means you'll need about as much free space on your phone as your Signal database takes, and it may take many hours to make if your database is large (mine is 18GB). I used to wake up to find my phone had not even fully charged because it had been so busy writing Signal backups. 2. Once you have it on disk, how do you get it away f…

On Linux KDE connect can mount your phones filesystem as FUSE filesystem and then you can use desktop file explorer like dolphin. It's even integrated and automatically apears as an option. Quite convenient, I would say. Performance is pretty good too.

Any Linux desktop can do that via MTP (Google doesn't allow access as mass storage anymore)
Post reply on HN