this post was submitted on 06 Jul 2024
370 points (90.9% liked)

Technology

59055 readers
3173 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
370
Signal under fire for storing encryption keys in plaintext on desktop app (stackdiary.com)
submitted 3 months ago by [email protected] to c/[email protected]
72 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 50 points 3 months ago

Under normal circumstances I wouldn't expect any privacy between processes on a desktop OS under the same UID.

If you use Chrome's password manager on Windows your password database is unlocked with your password upon login and is available to every process you run.

There's only so much you can do, as an app, to protect against OS deficiencies.

The desktop app on Windows is a sacrifice of security for convenience.