Post #3042940
2025-05-21 22:25 UTC
@cursedsql@hachyderm.io @aburka@hachyderm.io @dangoodin@infosec.exchange
Signal desktop uses Electron safeStorage for the database password, and that's backed by the relevant OS's allegedly secure keyring storage.
https://github.com/signalapp/Signal-Desktop/issues/6944#issuecomment-2243704263
Replies (1)
-
@cursedsql@hachyderm.io 2025-05-21 23:05
@mathew@universeodon.com @aburka@hachyderm.io @dangoodin@infosec.exchange I mean - last time I wrote the code to export the data from signal that's what I found https://github.com/ConstantineK/export-signal-desktop-to-json/blob/49de9cdffd9368518dc295c502dd17e0e4a0e1b5/src/lib.rs#L215 - my program could read your encrypted sqlite database (or could when I wrote it two years ago) by getting the password out of the json stored right next to it