Replying to Avatar Luxas

Oopsies

https://stackdiary.com/signal-under-fire-for-storing-encryption-keys-in-plaintext/

Avatar
Ava 1y ago

**According to cybersecurity researchers Mysk, the desktop version of Signal stores encryption keys in plain text, an issue that potentially exposes users to data theft.**

nostr:nevent1qqsdr6lfce7dkvmkqxfjl2ru89hhwmd2j7gdzjphu5cm3mz6s7wzkqgpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtczyr2f4ypr5gwm5xeusvrv5d5m7vjrmz6yhrctd5gevcrl0vyep75d7qcyqqqqqqgty9jya

Reply to this note

Please Login to reply.

Discussion

Avatar
Dr. Hax 1y ago

Yeah, this has been true for a long time (possibly since inception?). Encrypted sqlite file sitting right next to the key to decrypt it.

Avatar
zhenya 1y ago

damn but it's such a nice blend of secure and convenient. is mobile only still viable for a normie daily driver