Comment on Signal under fire for storing encryption keys in plaintext on desktop app
NobodyElse@sh.itjust.works 2 months agoWith even email clients and web browsers running arbitrary and untrusted remote code on a regular basis, that model needs serious reconsideration.
This xkcd shouldn’t still be insightful. xkcd.com/1200/
ChillPill@lemmy.world 2 months ago
Maybe its time to rethink desktop security. I realize that there is credential manager on windows, keychain on mac, and similar on gnu/linux; even with that it seems for a lot of services “all” you need to do is steal a cookie and all of a sudden you are someone else.
MeanEYE@lemmy.world 2 months ago
Idea of using a web browser for a platform was dumb enough and the reason why none of the keys were stored in appropriate services.
vrighter@discuss.tchncs.de 2 months ago
fuck no. It’s imbossible to be productive on an android or ios phone, where the os is hostile to you actually using it the way you want.
For an example of rethinking desktop security, see wayland in linux, and how ll accessibility programs now
don’tcannot possibly work.mrvictory1@lemmy.world 2 months ago
DeX mode: Am I a joke to you?
vrighter@discuss.tchncs.de 2 months ago
i do have and use that. But it’s still running android apps. which are designed for a touchscreen.
Termux is great though
jdeath@lemm.ee 2 months ago
seems to be the way both apple and MS are going.