News for hackers. Stuff that matters.
Re:Signal Secure Backups by nottorp on Monday September 08, 2025 @01:55PM (#45171546)
> Once you have it on disk, how do you get it away from your phone?

adb pull no worky? At least for HN readers.

Re:Signal Secure Backups by Sesse__ on Monday September 08, 2025 @01:56PM (#45171555)
Any backup that needs manual intervention is no backup.
Re:Signal Secure Backups by dmesg on Monday September 08, 2025 @02:09PM (#45171734)
Even automatic backups run at intervals to cause less server load. The article says you absolutely have to write down your restore key too (They say notebook or PW manager).

It may seem obvious now, but I know most people will forget and be puzzled if their phone suffers physical damage. A lot about this has mandatory manual steps.

Re:Signal Secure Backups by kelnos on Monday September 08, 2025 @03:41PM (#45172936)
I think you misunderstand. Any backup that requires a manual step every time a backup is created is not a backup. A backup that requires some one-time manual setup, like recording a restore key, is fine.

Yes, there are some people who will forget to do that, or just lose the restore key, but that's the security/usability trade off.

Re:Signal Secure Backups by nottorp on Monday September 08, 2025 @02:01PM (#45171614)
Thought people are talking about backups without a "cloud" involved. So you'd need to manually connect your phone to something...
Re:Signal Secure Backups by nine_k on Monday September 08, 2025 @02:31PM (#45172002)
Wireguard + syncthing (from F-Droid) work fine. Triggering it when the phone is on the charger makes it very easy to sync things from a computer to the phone, while next to the computer.
Re:Signal Secure Backups by hiq on Monday September 08, 2025 @03:35PM (#45172853)
To be clear, Signal + Syncthing also works fine, that's what I have.
Re:Signal Secure Backups by XorNot on Monday September 08, 2025 @03:50PM (#45173048)
It absolutely does not work fine. Keeping 2x the size of my database in free space on my phone in free space to let backups work it's no solution at all, which is why I stopped doing it. (The backup creates two files - current and previous, and Syncthing can't remove complete files to another location, so you need an actually rather difficult to write script to do it).
Re:Signal Secure Backups by nine_k on Monday September 08, 2025 @04:38PM (#45173659)
I see. I was talking about Syncthing in general, not about the specific way of backing up Signal.
Re:Signal Secure Backups by roywiggins on Monday September 08, 2025 @10:14PM (#45176619)
I never really grokked Syncthing.

I recently vibe-coded a crappy Windows Go GUI to grab files off my phone via rclone & sshd4a and then optionally delete them, but it's a very manual process since sshd4a has to be running on the phone before I initiate the pull.

Re:Signal Secure Backups by XorNot on Tuesday September 09, 2025 @02:27AM (#45178175)
Syncthing is just open source Dropbox, self hosted.

It's entire purpose is "make two folders identical".

It's very good at that: so good that I frequently wish it did other things - i.e. if it had some notion of minimum seeding levels so it would destage files off a device provided they were replicated elsewhere (e.g. automatically clearing old photos off your phone would be a good use of it).

Re:Signal Secure Backups by roywiggins on Tuesday September 09, 2025 @08:16AM (#45180905)
Yeah, I think I was just trying to get it to do something it wasn't suited for!
Re:Signal Secure Backups by Sesse__ on Monday September 08, 2025 @02:09PM (#45171728)
What? My phone has a perfectly working 802.11 chipset, which is able to talk to my very own machines that are not in a cloud, no manual connection needed. This is purely a software/ecosystem issue.
Re:Signal Secure Backups by dmesg on Monday September 08, 2025 @02:16PM (#45171815)
Imagine we could run the backup server backend self-hosted and FLOSS. Like Vaultwarden, the upstream bitwarden client API.