Email or username:

Password:

Forgot your password?
Top-level
Mysk🇨🇦🇩🇪

@Mer__edith

2/4

2) The issue was reported to Signal by others back in 2018, so we didn’t find anything new. App sandboxing technology had been available for a long time on desktop (Windows AppContainer and macOS App Sandbox). Even if we ignore sandboxing, while Signal encrypts the chat database, it stores the encryption key insecurely in plaintext.

… 🧵

4 comments
Mysk🇨🇦🇩🇪

@Mer__edith

3/4

3) We “the posters” didn’t feel the need to reach out to Signal first since the issue had been known to Signal’s developers since 2018. After 6 years without a resolution, we believe it becomes more important to raise awareness than to attempt to directly engage with Signal, or any other vendor. Also, I challenge you to point out any instance of inflammatory language in our posts about Signal.

…🧵

Mysk🇨🇦🇩🇪

@Mer__edith

4/4

Finally, Signal has a huge responsibility towards your users, many of whom rely on Signal to be the most secure way of communicating in areas of the world where their lives would be in danger if their messages were to be compromised. This is not hyperbole, and Signal needs to continue to live up to that responsibility.

DELETED

@mysk @Mer__edith

All I can say as a user who relies on Signal a lot and is one of few who actually supports Signal by monthly donations through its app is this:

The expectation from the paragon of private and secure messaging platform is that it is indeed fully private and secure to a point where even physical access (short of knowing admin credentials), Signal must be made to ensure of anything within it is encrypted, including pictures and documents that may be shared.

DELETED

@mysk @Mer__edith

I love Signal and will continue to use and support and recommend it but it’s things like this that slowly begin to leave a bad taste in your mouth.

I hope this is resolved soon. By the looks of it, it can be as it’s a technical issue and we don’t seem to be limited by technology unless my interpretation and inference from all that I have read is incorrect.

Please look into this more and share an update with a fool proof resolution for the millions relying on it.

Go Up