News for hackers. Stuff that matters.
Re:Standalone Signal Desktop by ec109685 on Wednesday November 01, 2017 @01:29AM (#15598979)
Shouldn’t you instead just encrypt your disk entirely?
Re:Standalone Signal Desktop by metilda on Wednesday November 01, 2017 @03:08AM (#15599332)
That is Moxie's main point, full disk encryption should be used everywhere, and encrypting Signal's message database on Android is purely due to full disk encryption on Android being a steaming pile or bricking your phone.
Re:Standalone Signal Desktop by enraged_camel on Wednesday November 01, 2017 @04:59AM (#15599674)
I should, and do, but a lot of non-techies don't, and this design decision might end up with their Signal messages compromised.

I mean isn't one of Signal's target audience people like journalists and activists?

Re:Standalone Signal Desktop by hutzlibu on Wednesday November 01, 2017 @09:19AM (#15600864)
Yes, but the point is, if those people don't use ecryption, then they have a problem anyway - and if they do, but their system is compromised, than the attacker gets anything anyway. In either case, I think Signal's job is to secure the messages going out and coming in and not protecting the disk.