Hacker News new | ask | show | jobs
by juniperplant 1975 days ago
> Everything is end-to-end encrypted by default, so you know nobody is collecting your data.

I think it's wise to remember that what happens on the other "end" is outside of your control.

If the other person in the conversation stores chat backups unencrypted you're still at risk, and there's not much you can do about it.

2 comments

The threat model assumes the other party is trusted. If not, in the limit they can film their screen and broadcast it to the internet, so there's nothing you can do about that.
I believe you have self-destroy timers in Signal. Perhaps those help.
Snapchat was based around that and people still copied content.

If someone can read it, then they can copy it.

it more so prevents people from retroactively going back in time and scraping data they wouldn't have in the moment. Many of my chats expire all messages after 24 hours because of this.

Most people will not archive all texts they get in the moment, it's only after some fallout or event happens they there's motivation to dig up old messages.

Yep.

Wickr does "screenshot notification" somehow, so now I occasionally get sent photos taken of phones showing "private" Wickr messages...

In order for the message to be readable by the other party you fundamentally trust the other party. A self-destroy timer doesn't really help that aspect (which is why I don't use them).