News for hackers. Stuff that matters.
Re:Keep your phone number private with Signal usernames by noja on Tuesday February 20, 2024 @01:37PM (#39445018)
Great! Now can we have backups so we don´t lose our messages if our phone gets stolen or breaks?
Re:Keep your phone number private with Signal usernames by ibejoeb on Tuesday February 20, 2024 @01:49PM (#39445199)
Backups have existing for quite some time: settings -> chats -> backups

update: only on android. turns out there are quite a few caveats for backup. See https://support.signal.org/hc/en-us/articles/360007059752-Ba...

Re:Keep your phone number private with Signal usernames by anigbrowl on Tuesday February 20, 2024 @02:31PM (#39445769)
They're pretty bad. You can't specify where the backup goes, so if you are running low on storage space (eg if you have a lot of photos or videos to back up) and add an SD card, tough luck because you can't save there. The best you can do is manually export your media (also without any choice over where it goes) and then manually move it to the SD card to make space on your internal storage. They say this is for security but if an attacker is in a position to export your backup, they are already in your signal account.

Same story with the PIN signal requires if you haven't used it in a few hours. It's the same as your phone PIN and there isn't anywhere you can change it, so it's just security theater.

Re:Keep your phone number private with Signal usernames by ThePowerOfFuet on Tuesday February 20, 2024 @03:18PM (#39446346)
> Same story with the PIN signal requires if you haven't used it in a few hours. It's the same as your phone PIN and there isn't anywhere you can change it, so it's just security theater.

This is not the Signal PIN. It sounds like you have the Screen Lock option enabled.

https://support.signal.org/hc/en-us/articles/360007059792-Si...

Re:Keep your phone number private with Signal usernames by anigbrowl on Tuesday February 20, 2024 @10:33PM (#39449848)
I'm aware of the registration lock PIN. But the screen lock option is just the same as the phone PIN, so it provides zero additional security.
Re:Keep your phone number private with Signal usernames by izacus on Tuesday February 20, 2024 @02:02PM (#39445395)
Please stop peddling this horrible experience as a form of a valid backup. A process that requires full manual interaction and requires you to know ahead of time when your phone will break or be stolen is not a useful backup process.
Re:Keep your phone number private with Signal usernames by growse on Tuesday February 20, 2024 @02:09PM (#39445491)
Eh? My Signal auto-backups every night to a device folder which I then replicate off with Syncthing. How is that requiring "full manual interaction"?
Re:Keep your phone number private with Signal usernames by freedomben on Tuesday February 20, 2024 @02:28PM (#39445729)
I think GP is being a little too harsh, but I also think you're being a little too generous. If it requires a third-party tool like sync thing, then it seems like a hard point to argue that signal has Auto backups. It's better than nothing, but it is definitely not as seamless as most users would expect from a backup solution.
Re:Keep your phone number private with Signal usernames by growse on Tuesday February 20, 2024 @02:36PM (#39445837)
It doesn't "require" Syncthing, I just choose to use it. I could choose to keep it on my device, or upload it to Dropbox or something else. Even keeping it locally is still a backup that protects against the device corrupting it's local database or accidentally getting uninstalled / cleared.

There's no single obvious thing called "this is what everyone wants from backup".

Re:Keep your phone number private with Signal usernames by freedomben on Tuesday February 20, 2024 @04:07PM (#39446920)
> My Signal auto-backups every night to a device folder which I then replicate off with Syncthing

> It doesn't "require" Syncthing

I'm talking about your solution, and yes it does seem to require syncthing, unless you are using some fourth party tool that sets up syncthing automatically for you, and in that case it still isn't built in to Signal.

There are other possible solutions, but you used your solution as an example. If you have a different solution that doens't require syncthing and also doesn't require manual intervention (i.e. Signal app can automate the process), please share it. Remember what the comment said that we are replying to:

> Please stop peddling this horrible experience as a form of a valid backup. A process that requires full manual interaction and requires you to know ahead of time when your phone will break or be stolen is not a useful backup process.

Did you not have to manually setup syncthing (or some other sync tool) to get it working? Or do you know of some way to do that with just Signal?

Unless you are saying that Signal has a built-in backup solution that doesn't require manual intervention (like configuring some sort of third-party syncing service) then you aren't rebutting anything.

Re:Keep your phone number private with Signal usernames by growse on Tuesday February 20, 2024 @04:36PM (#39447251)
If we're widening the definition of "manual intervention" to "I have to configure my device to do what I want", then yes. Setting up backups is a task that requires a manual intervention.

You want signal to fully automate the process of configuring your device with an arbitrary third party service to send backups to with zero "manual intervention"? I think you're asking for the moon on a stick.

Re:Keep your phone number private with Signal usernames by izacus on Tuesday February 20, 2024 @04:09PM (#39446938)
It's pretty safe to say that most users will want a type of "backup" that actually leaves the device so the data doesn't disappear if your phone falls out of your pocket and breaks or gets stolen.

It's after all, a device that's carried around and much easier to destroy than pretty much any other.

For most of population (you know, the ones we all want to get onto Signal so they stop using Meta and Apple stuff) not losing their valuable pictures, memories and conversations is way above the paranoia of some theoretical government official deciding to give up while trying to unlock your phone.

Re:Keep your phone number private with Signal usernames by growse on Tuesday February 20, 2024 @04:33PM (#39447215)
I don't think that's a safe assumption at all. And even if it were, there's eleventy billion different ways to have the data leave the device and wind up somewhere else.

Should Signal support/implement all of these? Some of them? Which ones?

Re:Keep your phone number private with Signal usernames by izacus on Wednesday February 21, 2024 @02:11AM (#39450963)
Whichever. As long as it works. Plenty of choice. Instead they spend time with crypto crap.
Re:Keep your phone number private with Signal usernames by IndySun on Saturday March 02, 2024 @04:11AM (#39571217)
Not just Signal, also Session, which is mildly more unnamed.
Re:Keep your phone number private with Signal usernames by bsimpson on Tuesday February 20, 2024 @01:59PM (#39445336)
I see it, but it just looks like it uses internal storage. So far as I know, there's no Drive File Stream/Dropbox sync for Android, so you'd still lose your shit if you weren't manually backing them up somewhere.

I doubt that's a habit many people will develop for a setting they didn't even know existed.

Re:Keep your phone number private with Signal usernames by MadnessASAP on Tuesday February 20, 2024 @02:13PM (#39445538)
It's not going to help a casual user but I solved the problem by putting the Signal backup in a Syncthing shared folder. It's been a workable solution at least 2 phone swaps now
Re:Keep your phone number private with Signal usernames by XorNot on Tuesday February 20, 2024 @03:31PM (#39446507)
It tries to keep 2 copies and so uses 2x the space on your phone. If you're sending a lot of images and video, then it becomes impractical quickly.
Re:Keep your phone number private with Signal usernames by vinay427 on Tuesday February 20, 2024 @01:56PM (#39445312)
My cousin comment [1] provides a bit more detail, but this is not available on iOS/iPadOS despite Apple allowing apps to save files to the filesystem and many other apps supporting this for years now.

[1] https://news.ycombinator.com/item?id=39445286

Re:Keep your phone number private with Signal usernames by frereubu on Tuesday February 20, 2024 @01:54PM (#39445275)
I don't see that option in Settings > Chats on my iPhone. What device are you using?
Re:Keep your phone number private with Signal usernames by noja on Tuesday February 20, 2024 @01:53PM (#39445253)
Nope. Latest version.
Re:Keep your phone number private with Signal usernames by ibejoeb on Tuesday February 20, 2024 @01:55PM (#39445294)
Backup functionality was removed in the latest version?
Re:Keep your phone number private with Signal usernames by jacoblambda on Tuesday February 20, 2024 @01:58PM (#39445323)
No. iOS builds don't support it.
Re:Keep your phone number private with Signal usernames by p2004a on Tuesday February 20, 2024 @01:48PM (#39445178)
But there are backups available in signal app
Re:Keep your phone number private with Signal usernames by vinay427 on Tuesday February 20, 2024 @01:55PM (#39445286)
There are no backups available on the iPhone/iPad app, only a device-to-device transfer while setting up a new device assuming your previous device and new device are both iPhones/iPads. This is despite support for apps storing files to the filesystem that was added some years ago now, and many other apps on those platforms supporting backups of custom file formats (or JSON, etc.).

https://support.signal.org/hc/en-us/articles/360007059752-Ba...

Re:Keep your phone number private with Signal usernames by yreg on Tuesday February 20, 2024 @03:05PM (#39446205)
I'm currently facing this issue.

The process to transfer the history is to scan a QR code displayed on the new phone by the app on the old phone.

Well, the camera on my old iPhone is broken. The phone has 3 other working cameras, but I cannot switch which one the app uses…