Post #3245638

@psylo@infosec.exchange Thanks for the background! What would encrypting the database achieve in this context though? For a completely different threat like cops snooping around on your phone, sure, that would be a good idea anyway. But as long as they can freely pass the encryption keys between their own apps, I don't see how that would help in this scenario. We know what kind of exploits they're willing to use (and how much malwareish behavior Google, and probably Apple, os wiling to tolerate from the likes of them) from their "deanonymize Facebook pixels via connections to localhost" stunt. @wabetainfo@mastodon.social @mysk@mastodon.social