Comment on Signal is Flawed, Why XMPP is Amazing! (new animated video)
jet@hackertalks.com 9 months agoThis is why I was really pissed off when signal started storing people’s private keys in the cloud trusting SGX enclosures to prevent them from getting cracked. A four-digit pin is nothing. That’s antithetical to their entire emission. SGX enclosures have been compromised multiple times.
To me this is the greatest feeling of signal.
gonzoknowsdotcom1@monero.town 9 months ago
yea, I’m pretty sure the 4 digit pin can be changed to an higher count
jet@hackertalks.com 9 months ago
Yes. You can disable using a pin to encrypt your private key. You can use a cryptographically sound extremely long key. If you disable that feature entirely. Most people won’t do that. And funnily enough your key is still sent to the SGX enclosure is just signed with that massive passcode now.
FWIW: Settings, account, advanced pin settings, disable pin.
But it’s moot if the people you’re talking to have uploaded their pin protected private key to signal. Which the vast majority of people do
gonzoknowsdotcom1@monero.town 9 months ago
The day that signal gets supported by airlines is the day, I stop using it.