Singal for macOS is not secure

twitter.com

8 pointsdoener4 comments

I'm struggling to view this as a security issue. Storing user data in files on the filesystem is how applications on general purpose computers work. This isn't an iPad.

If people who steal your files can see your chat history and pretend to be you that IMO is a security risk.

I think the implication is that they c/should encrypt those files and store its key securely, e.g. using https://developer.apple.com/documentation/security/certifica...

The VM should show up as a second linked device.

Also, Signal for Windows installs in a user writable location (C:\Users\...). Which means that user-level malware can modify or replace its binaries.

Reply on news.ycombinator.com