News for hackers. Stuff that matters.
Re:Signal adds a payments feature with a privacy-focused cry... by codethief on Tuesday April 06, 2021 @05:18PM (#26717516)
The problem is: Signal already relies on SGX for lots of other features (Signal PINs & Secure Value Recovery, contact discovery etc. etc.) and these depend on SGX working as advertized.
Re:Signal adds a payments feature with a privacy-focused cry... by AlexCoventry on Wednesday April 07, 2021 @01:02AM (#26720777)
I wasn't aware that Signal relies on SGX. If I want to use Signal without being exposed to risk of SGX compromise, is it still possible?
Re:Signal adds a payments feature with a privacy-focused cry... by codethief on Wednesday April 07, 2021 @04:21AM (#26721810)
For contact discovery, AFAIK no[0].

For everything else: Yes, by setting a randomized long Signal PIN since SGX is effectively used to add entropy to Signal PINs[1]. You can also disable Signal PINs – in this case Signal will simply set a randomized long PIN for you.

[0]: https://signal.org/blog/private-contact-discovery/

[1]: https://signal.org/blog/secure-value-recovery/

Re:Signal adds a payments feature with a privacy-focused cry... by AlexCoventry on Wednesday April 07, 2021 @10:47AM (#26725713)
Thanks!