Can you run Signal with basically no iOS or Android devices right now and still do the (mandatory) prove-your-phone-id steps?
It feels like very near future I, and everyone else who cares about computing autotonomy, we're all gonna have to start runnin' the Linux phones, no matter how non-ideal that user experience is right now
@Seirdy @cwebber signal-cli does indeed advertise supporting registration.
https://github.com/AsamK/signal-cli
also i do want to ask, don't most Mobile Linux projects support running android apps in one way or another? it should be possible then (if not easy, though maybe there's some reservations i'm not aware of) to run the mobile version of Signal on a Linux phone.
@Yuvalne @Seirdy @cwebber afaik flatpak apps will still show their processes in ps, so you'd be able to grep for it? flatpak just sanboxes the apps so they can't see outside the allowed directories
but the issue with disabling sandboxing is not that it allows it to access other programs or that other programs can access it, but rather that if you compromise a worker thread or something it allows you access to all other threads, allowing you to escalate to something like a full app compromise (leaking user data)
@[email protected] @[email protected] @[email protected] fair point. i'm not seeing this flag anymore, but there is a no-zygote-sandbox flags on one of the processes. digging through their github, this seems to have been the case since v7.38, so over a year ago. https://github.com/signalapp/Signal-Desktop/issues/3573#issuecomment-2575864732
Fortunately (unfortunately?) this doesn't seem to be true, signal-export [1] is able to automatically extract the encryption key for me (on Linux) and read all my chats. I think Signal on desktop only obfuscates the database, it's not actually protected against the local user.
Christine Lemmer-Webber
Seirdy
Talya (she/her) 🏳️⚧️✡️
solo
khm
Liliane Fontenot