• 1 Post
  • 37 Comments
Joined 4 months ago
cake
Cake day: March 19th, 2024

help-circle





  • For most casual users, it is a deal-breaker. And it’s hard to get everyday people to use your software with roadblocks like that.

    That’s fair enough, but the way the mobile app works is that you can opt in to having encryption at rest with a passphrase, so if you want to leave your signal database unencrypted you can.

    You must not get email very often, this is absolutely a non-starter for me.

    Once you open it you can leave it open if you need notifications. Sometimes I leave it open, sometimes I just want to check my emails and then close it. Idk, I really think typing in a password for authentication/decryption regularly is such a non-issue, like for instance do you not regularly type in a password when you run a command with sudo? Again, if it’s opt-in I also don’t see the issue, except for the issue of allowing people to not encrypt their Signal data thus potentially compromising the people they’re messaging, but obviously that issue is currently universal for Signal desktop.




  • Obviously there is the disk encryption passphrase at boot, adding another one for signal would in my case be redundant.

    I also have full disk encryption, but I still have some databases on my disk encrypted because I decrypt my disk when I boot my computer. But yeah if you have Signal open (& its db decrypted) all the time it would probably be minimal. I don’t have Signal open all the time though, only when I want to check messages or am actively using it

    I don’t think it does much on the typical desktop, be it windows or linux, where there are so many ways to escalate or persist privilege for anyone that has user-level access.

    The point would be encryption, even the root user wouldn’t be able to read encrypted data if they don’t have the passphrase







  • Forensic data on you is already pretty easy to obtain unless you’re taking special effort to avoid it being taken. Also when you get arrested they take whatever biometrics they like. The info on you those DNA testing companies are getting is info already easily available to the government. I guess if you’re concerned about your DNA being used to tailor ads to you, not just to criminalise you, it could be an issue, but idk I don’t think your DNA can really predict what ads will be effective on you.