|
|
|
|
|
by Strongylodon
1990 days ago
|
|
>The main problem with projects like these is that I don't know (without manually checking myself) whether they are actually tracking the Signal source code effectively. That's my main complaint with Signal - lots of widgets. More code to audit and keep an eye on. More users is good, but stickers and stuff.. meh. Maybe teach zoomers how to use emoticons ;-) |
|
I also find it a bit crazy that the 'desktop' app is Electron, and they don't hint anywhere what a house of cards Electron is. I wouldn't run it except inside a VM, and even then I would have to accept that all the messages could be extracted remotely. They give no indication of their compliance with best practices (e.g. https://labs.bishopfox.com/tech-blog/reasonably-secure-elect...) with is disturbing.