quantumcog

@quantumcog@sh.itjust.works

• ⁨Comment⁩ on ⁨Signal downplays encryption key flaw, fixes it after X drama⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  The argument still holds. If they have remote execution access, they already have your data. Encryption can’t protect your data here because encrypted data will automatically become unencrypted once the user logs in.

• ⁨Comment⁩ on ⁨Signal downplays encryption key flaw, fixes it after X drama⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  Yeah, I know about this. That’s why backups are so important.

• ⁨Comment⁩ on ⁨Signal downplays encryption key flaw, fixes it after X drama⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  I understand Signal’s stance on this. For this vulnerability, the attacker needs physical access to computer. If the attacker has already gained physical access, the attacker can already access your messages, crypto wallets, password managers. Many password managers also have this flaw. For example, Someone can change Keepass master password if the user is already logged in to the session, if they have physical access to the PC and lock you out of all your accounts.