Live data from Hacker News

Signal Secure Backups

signal.org

31–40 of 460 posts

Re: Signal Secure Backups

#31
post #8

Wow, maybe as a side effect users will be able to migrate between Android and iOS without losing their message history. Seriously, why is the migration protocol completely different on the two platforms?

> Seriously, why is the migration protocol completely different on the two platforms?

Because they don't want to make jumping to the competitor too easy.

Re: Signal Secure Backups

#32
This is so incredibly important! I am very happy to see this, the fact that you could not do a backup on iOS and you would lose everything in case your device dies is the biggest drawback of Signal.

I still do not quite understand why I can't have the option to just back things up to iCloud (I do understand the security implications and I'm fine with it), but ANY backup solution is better than "your data is gone, tough".

Oh, now having reread the article I do understand why I can't have any other backup options. Paid subscription. Of course.

Re: Signal Secure Backups

#33

Earlier quoted context omitted.

There's a big difference to me between storing it on device and someone else's servers.

Sure, but you already have no way of knowing which one the other parties in your chats are doing. I already sync my Signal backups to the cloud, because that's the most practical and time/cost-effective way to have a 3-2-1 backup system for my chats.

There's a difference between someone in your chats acting adversarially and Signal supporting/encouraging adversarial behavior as part of the way the app works. If Signal published a change to the protocol that removed forward secrecy, we wouldn't consider it a non-event and say "well anyone could screenshot messages anyway," even though that may be true. They're calling this "secure backups," but in truth it appears to reduce security

Re: Signal Secure Backups

#34

Earlier quoted context omitted.

Sure, but you already have no way of knowing which one the other parties in your chats are doing. I already sync my Signal backups to the cloud, because that's the most practical and time/cost-effective way to have a 3-2-1 backup system for my chats.

There's a difference between someone in your chats acting adversarially and Signal supporting/encouraging adversarial behavior as part of the way the app works. If Signal published a change to the protocol that removed forward secrecy, we wouldn't consider it a non-event and say "well anyone could screenshot messages anyway," even though that may be true. They're calling this "secure backups," but in truth it appears…

I'd also wonder where this shared encryption key for message "backups" is stored. If it's available on all of my devices, I suspect it would be available on other devices as well?

Re: Signal Secure Backups

#35
It's a real shame they aren't implementing this on iOS in beta before the new iPhone launch. Android has had backups for a long time, just locally. iOS users have been SOL so if anything goes wrong with the transfer and sync on your new phone, you're screwed.

Re: Signal Secure Backups

#36
post #12
post #6

Without paying for remote backups, can I just manage my own backup on my own hard drive, and restore it when I want to?

Yes! That has been supported for a long while. At least on Android, go to Settings -> Chats -> Chat Backups. Set up a schedule and a passphrase and a folder, and it will export your chats every day. I do that and then sync that folder with another computer using SyncThing.

Only on Android, not iOS.

Re: Signal Secure Backups

#37
Great article not mentioning local backups were already available and what this is about. The state of affairs in iOS vs Android of the past feature and the next one. Details of all the kind are missing. WTF.

Re: Signal Secure Backups

#38

Earlier quoted context omitted.

Sure, but you already have no way of knowing which one the other parties in your chats are doing. I already sync my Signal backups to the cloud, because that's the most practical and time/cost-effective way to have a 3-2-1 backup system for my chats.

There's a difference between someone in your chats acting adversarially and Signal supporting/encouraging adversarial behavior as part of the way the app works. If Signal published a change to the protocol that removed forward secrecy, we wouldn't consider it a non-event and say "well anyone could screenshot messages anyway," even though that may be true. They're calling this "secure backups," but in truth it appears…

I don't think it's appropriate to call someone you're talking to with disappearing messages turned off making a backup of the conversation so they have the (non-disappearing) message history if they drop their phone in a lake as "adversarial behavior".

If you don't want them to have a history only communicate via disappearing messages.

Re: Signal Secure Backups

#39
Backing up Signal on Android for free and offline was ~always possible. The app creates a multi GB backup file on the phone memory under the Signal folder that you can just copy out and back on a new phone.

The file is encrypted with the passcode and the database can be extracted.

https://github.com/bepaald/signalbackup-tools

Re: Signal Secure Backups

#40
post #12
post #6

Without paying for remote backups, can I just manage my own backup on my own hard drive, and restore it when I want to?

Yes! That has been supported for a long while. At least on Android, go to Settings -> Chats -> Chat Backups. Set up a schedule and a passphrase and a folder, and it will export your chats every day. I do that and then sync that folder with another computer using SyncThing.

> I do that and then sync that folder with another computer using SyncThing.

AFAIK SyncThing only monitors for changes between files with matching names, and Signal stores each backup with a separate (timestamped) filename. Are you storing every day's backup individually, or do you have some tool for deduplicating?

Post reply on HN