• 5 Posts
  • 578 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle






  • The alternative is safeStorage, which uses the operating system’s credential management facility if available. On Mac OS and sometimes Linux, this means another process running in the user’s account is prevented from accessing it. Windows doesn’t have a protection against that, but all three systems do protect the credentials if someone copies data offline.

    Signal should change this, but it isn’t a major security flaw. If an attacker can copy your home directory or run arbitrary code on your device, you’re already in big trouble.




  • If someone can read my Signal keys on my desktop, they can also:

    • Replace my Signal app with a maliciously modified version
    • Install a program that sends the contents of my desktop notifications (likely including Signal messages) somewhere
    • Install a keylogger
    • Run a program that captures screenshots when certain conditions are met
    • [a long list of other malware things]

    Signal should change this because it would add a little friction to a certain type of attack, but a messaging app designed for ease of use and mainstream acceptance cannot provide a lot of protection against an attacker who has already gained the ability to run arbitrary code on your user account.




  • Sure: don’t use Mastodon to participate in Lemmy communities.

    You can of course, which you clearly already know. Tagging a community in s top-level post even results in a good experience, but subscribing to communities does not, and you can’t vote.

    Maintaining accounts on both is a good idea.


  • I find it important to have some tools with me. Even if I’m really unlikely to use them, being a useful person who can fix stuff and solve problems is a major component of my self concept.

    I also find the tools interesting in their own right. Lots of people like trinkets and gadgets, and there may be no explaining it to someone who doesn’t immediately find that sort of thing appealing.