Technology

945 readers

62 users here now

A tech news sub for communists

founded 2 years ago

MODERATORS

muad_dibber@lemmygrad.ml

Signal downplays encryption key flaw, fixes it after X drama (www.bleepingcomputer.com)

submitted 3 months ago by yogthos@lemmygrad.ml to c/technology@lemmygrad.ml

21 comments fedilink hide all child comments

I really don't understand why so many people like Signal. It's an utter piece of shit in terms of UX, has questionable security practices, harvests phone numbers, and it's located on a central server in US.

you are viewing a single comment's thread
view the rest of the comments

[–] landlords_morghulis@lemmygrad.ml 23 points 3 months ago* (last edited 3 months ago) (2 children)

Signal has always looked like a honeypot operation to me. Keep in mind, too that if you run a CIAware operating system, the key can be remotely pulled off of the filesystem or extracted from memory. It's not possible to have any secure piece of software on an unsecurable OS.

[–] yogthos@lemmygrad.ml 9 points 3 months ago

indeed

[–] muad_dibber@lemmygrad.ml 8 points 3 months ago (1 children)

Totally agree, it has an extremely sus history too. No one should be using any US-based centralized service.

[–] ahriboy@lemmygrad.ml 2 points 3 months ago (1 children)

Someone should give SimpleX or Session a try

[–] ComradePupIvy@lemmygrad.ml 1 points 3 months ago

I have tried session, the crypto wierds me out a little, but I could not find a terrible issue with the service. I will say Quality of Life Features where not there, most notable the messageing service would start to heavily log out if you have it open too long