Privacy

32482 readers

290 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

483

Signal under fire for storing encryption keys in plaintext on desktop app (stackdiary.com)

submitted 5 months ago by [email protected] to c/[email protected]

258 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 35 points 5 months ago (2 children)

If your system is compromised to such an extend, it really doesn't make much difference how the keys are stored at rest.

[–] [email protected] 27 points 5 months ago* (last edited 5 months ago) (1 children)

If the keys are accessible to any process, your system doesn’t need to be compromised. All it takes is an App that you”trust” to break that trust and snatch everything up. Meta has already been caught fucking around with other social media apps on device. They even intercepted Snapchat traffic on some users devices in order to collect that data. It could be as simple as you installed WhatsApp and they went and pillaged your Signal files.

[–] [email protected] 7 points 5 months ago (1 children)

All it takes is an App that you”trust” to break that trust

I get what you're trying to say, but that's something I'd classify as "compromised" as well.

[–] [email protected] 11 points 5 months ago* (last edited 5 months ago) (1 children)

For sure, just suggesting that “compromised” doesn’t necessarily mean you got hacked by someone because they tricked you into giving a password, or they scraped it from another website, or you installed something sketchy. It could be as simple as Microsoft scans all your files with AI, or Meta snoops other social media (which it has been caught doing).

[–] [email protected] -1 points 5 months ago

So you're saying that the os itself is compromised? Gee, good luck protecting your processes from the fucking os, no matter how you do it.