fyi to linux users, the unofficial signal desktop flatpak doesnt use the freedesktop Secrets API no matter what you do and leaves your keys completely unencrypted
you can just dump ~/.var/apps/org.signal.Signal and read everything stored
if you're concerned, you should probably use the native package
#linux #flatpak #signal #Security
https://bsky.halvasweb.space /
npub1nm…a0axv
2024-09-24 19:56:29
Author Public Key
npub1nmh6g4m23xlyqw08gheyxhzj3ywsc3tmturxjfayjy7wvesdgtnq4a0axvSeen on
wss://relay.nostr.bandPublished at
2024-09-24 19:56:29Event JSON
{
"id": "77da4a175cce43ff9e6248f538fed80a71b3c98c7de928e7a503ab73f5a6e0d0",
"pubkey": "9eefa4576a89be4039e745f2435c52891d0c457b5f066927a4913ce6660d42e6",
"created_at": 1727207789,
"kind": 1,
"tags": [
[
"t",
"linux"
],
[
"t",
"flatpak"
],
[
"t",
"Signal"
],
[
"t",
"Security"
],
[
"proxy",
"https://wetdry.world/users/halva/statuses/113194289676484047",
"activitypub"
]
],
"content": "fyi to linux users, the unofficial signal desktop flatpak doesnt use the freedesktop Secrets API no matter what you do and leaves your keys completely unencrypted \n\nyou can just dump ~/.var/apps/org.signal.Signal and read everything stored \n\nif you're concerned, you should probably use the native package\n\n#linux #flatpak #signal #Security",
"sig": "5ea78602bdc13b7cf8189193909cfa0b2f275f5769702814a9fe60dfb0d97c306474c873b33a2edaf717d1b6749f217e18e5137d3a604a58ffa4fbcf1ac35341"
}