Oddbean new post about login | logout GM Nostr ☕ ICMYI - Don't forget to uninstall Signal desktop and remove related 'encrypted' data until they fix this gaping hole in their security architecture. Pretty embarrassing. https://x.com/mysk_co/status/1809287118235070662
where do I find the „related encrypted data“ to delete it?!
What OS are you running? Mac?
Yes, MacOS 🙏🏽
Do a search for Signal in your Library directory
Do you only need to uninstall Signal and delete the Signal folder?
Does uninstall clear the non encrypted files?
No you'll need to do that separate in your file browser
Might as well do the exploit with all the other apps that store data on a mac, while you're poking around the file browser. I'd be shocked if it'a only Signal that has this behavior.
thats not a surprise, its electron garbage, even if they will fix this issue it will remain an unmanageble giant pile of code and layers.
What about Linux?
Thanks for the heads up. Grumble.
Signal is not your main problem when a hacker is able to copy your data 🤷🏻♂️ Yes, a warning about the duplicated session would be nice, but it’s not a high security problem which requires any action like deleting signal from your mac
441 but I couldn't zap you earlier
