Post #3042938
2025-05-21 19:19 UTC
@aburka@hachyderm.io @dangoodin@infosec.exchange I'll only be comfortable never running windows 10 - if you run signal desktop your encrypted sqlite database's password is right next to the file so the security model there is a bit out of the window
Replies (2)
-
@aburka@hachyderm.io 2025-05-21 22:10
@cursedsql@hachyderm.io @dangoodin@infosec.exchange wait, what?
-
@mathew@universeodon.com 2025-05-21 22:25
@cursedsql@hachyderm.io @aburka@hachyderm.io @dangoodin@infosec.exchange Signal desktop uses Electron safeStorage for the database password, and that's backed by the relevant OS's allegedly secure keyring storage. https://github.com/signalapp/Signal-Desktop/issues/6944#issuecomment-2243704263