Signal under fire for storing encryption keys in plaintext
stackdiary.com
Popular encrypted messaging app Signal is facing criticism over a security issue in its desktop application. Researchers and app users are raising
  • 9tr6gyp3@lemmy.world
    21·
    7 months ago

    If your device is turned on and you are logged in, your data is no longer at rest.

    Signal data will be encrypted if your disk is also encrypted.

    If your device’s storage is not encrypted, and you don’t have any type of verified boot process, then thats on you, not Signal.

    • uis@lemm.ee
      1·
      7 months ago

      Signal data will be encrypted if your disk is also encrypted.

      True.

      and you don’t have any type of verified boot process

      How motherboard refusing to boot from another drive would protect anything?

        • uis@lemm.ee
          1·
          7 months ago

          Well, yes. By refusing to boot. It can’t prevent booting if motherboard is replaced.

          EDIT: s/do anything/prevent booting/

              • 9tr6gyp3@lemmy.world
                1·
                7 months ago

                If the hardware signatures don’t match, it wont boot without giving a warning. If the TPM/Secure Enclave is replaced/removed/modified, it will not boot without giving a warning.

                • uis@lemm.ee
                  1·
                  7 months ago

                  If the hardware signatures don’t match

                  Compromised hardware will say it is same hardware

                  If the TPM/Secure Enclave is replaced/removed/modified, it will not boot without giving a warning.

                  Compromised hardware controls execution of software. Warning is done in software. Conpromised hardware won’t let it happen.