Comment on Signal is Flawed, Why XMPP is Amazing! (new animated video)

gonzoknowsdotcom1@monero.town ⁨9⁩ ⁨months⁩ ago

• jet@hackertalks.com ⁨9⁩ ⁨months⁩ ago

  This is why I was really pissed off when signal started storing people’s private keys in the cloud trusting SGX enclosures to prevent them from getting cracked. A four-digit pin is nothing. That’s antithetical to their entire emission. SGX enclosures have been compromised multiple times.

  To me this is the greatest feeling of signal.

  source

  • gonzoknowsdotcom1@monero.town ⁨9⁩ ⁨months⁩ ago

    yea, I’m pretty sure the 4 digit pin can be changed to an higher count

    source

    • jet@hackertalks.com ⁨9⁩ ⁨months⁩ ago

      Yes. You can disable using a pin to encrypt your private key. You can use a cryptographically sound extremely long key. If you disable that feature entirely. Most people won’t do that. And funnily enough your key is still sent to the SGX enclosure is just signed with that massive passcode now.

      FWIW: Settings, account, advanced pin settings, disable pin.

      But it’s moot if the people you’re talking to have uploaded their pin protected private key to signal. Which the vast majority of people do

      source

      • gonzoknowsdotcom1@monero.town ⁨9⁩ ⁨months⁩ ago

        The day that signal gets supported by airlines is the day, I stop using it.

        source