signalapp/Signal-Desktop on Hacker News

…in the first place. [0]: https://en.wikipedia.org/wiki/Defense_in_depth_%28computing%... [1]: https://github.com/signalapp/Signal-Desktop/blob/development...

comment by danShumway · 2018-10-30 · in World of Warcraft: one simple line of code can cost you dearly (2016)

…grrowl copied and repasted the truncated display text of the link. The full link is 2 comments up: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616...

comment by Stephen304 · 2018-05-19 · in Another flaw in Signal desktop app leaks chats in plaintext

> The Signal devs thought $.html() does some kind of escaping: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616... . (this commit made something that was easy to exploit into something that was even easier to exploit). This is…

comment by grrowl · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

This doesn't seem to be true, here's the v1.10.0 code: https://github.com/signalapp/Signal-Desktop/blob/f6eb745632c... They do seem to be using react, and using dangerouslySetInnerHTML. Now that said, I haven't confirmed that this is the…

comment by archgoon · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

…know if this is exploitable, but they are using many different methods to escape HTML content: https://github.com/signalapp/Signal-Desktop/blob/d1f7f5ee8c1... Then here it's a different function: https://github.com/signalapp/Signal-Desktop/…

comment by ddtaylor · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

…it and run the resulting binary. The Signal devs thought $.html() does some kind of escaping: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616... (this commit made something that was easy to exploit into something that was even…

comment by rndgermandude · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

…not to eager to trust people writing commit messages like this and then OK that during peer review: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616... > Remove escaping from `linkText` > We leverage jQuery’s HTML escaping in…

comment by rndgermandude · 2018-05-16 · in Signal-desktop HTML tag injection advisory

…constructing raw SQL requests where parameterized queries suffice. Thankfully, it was just fixed: https://github.com/signalapp/Signal-Desktop/commit/4e5c8965f...

comment by ycmbntrthrwaway · 2018-05-16 · in Signal-desktop HTML tag injection advisory

Electron is unsafe because it's based on outdated versions of Chromium: https://github.com/signalapp/Signal-Desktop/issues/1635

comment by jsnar · 2018-05-12 · in Remote zero-click JavaScript code execution on Signal desktop

Signal desktop app is based on the insecure Electron runtime. See my report here: https://github.com/signalapp/Signal-Desktop/issues/1635

comment by jsnar · 2018-05-11 · in Remote zero-click JavaScript code execution on Signal desktop

It has a desktop app for MacOS, Linux and Windows. https://github.com/signalapp/Signal-Desktop

comment by sashimy · 2018-04-09 · in Reverse Engineering WhatsApp Web

…stays visible in task list. No thank you, but I refuse to use electron-based "native" apps. [1] https://github.com/signalapp/Signal-Desktop/issues/1119

comment by perakojotgenije · 2018-03-23 · in Telegram: 200M Monthly Active Users

…- wanna help us test proxy and system tray support? Tray support behind command-line argument: https://github.com/signalapp/Signal-Desktop/pull/1676 Proxy support behind command-line argument: https://github.com/signalapp/Signal-Desktop/pul…

comment by scottnonnenberg · 2018-02-22 · in Signal Foundation

…[2]: https://whispersystems.discoursehosting.net/t/encrypted-back... [3]: https://github.com/signalapp/Signal-Desktop/issues/522 [4]: https://github.com/signalapp/Signal-Android/pull/7380 [5]: https://whispersystems.discoursehosting

comment by wfn · 2018-02-21 · in Signal Foundation

No proxy support, so I can't use it in my corporate environment. https://github.com/WhisperSystems/Signal-Desktop/issues/1632 Also a bit annoying that it can't be run in the background, at least on Windows.…

comment by andyjh · 2017-11-01 · in Standalone Signal Desktop

Link to lower the barrier: https://github.com/WhisperSystems/Signal-Desktop/issues/new

comment by Vinnl · 2017-11-01 · in Standalone Signal Desktop

submitted issue for this: https://github.com/WhisperSystems/Signal-Desktop/issues/1635

comment by jsnar · 2017-11-01 · in Standalone Signal Desktop

Does it still store all data unencrypted on the disk? https://github.com/WhisperSystems/Signal-Desktop/issues/1017

comment by dbrgn · 2017-11-01 · in Standalone Signal Desktop

…probably be enabled in a production build with little modifications. This might get you started: https://github.com/WhisperSystems/Signal-Desktop/blob/d1f7f5...

comment by mfwoods · 2017-10-31 · in Standalone Signal Desktop

Why no web app? Moxie closed https://github.com/WhisperSystems/Signal-Desktop/issues/723 without giving any reasoning. Can someone link me to a blog post that explains why Signal is refusing to release a web version? I cannot run another…

comment by nikisweeting · 2017-10-31 · in Standalone Signal Desktop

…user base. Give us a github repo and we can build it ourself. Let me see if I can find one. Edit: https://github.com/WhisperSystems/Signal-Desktop

comment by noja · 2017-10-31 · in Standalone Signal Desktop

…[1], but you are correct in that they currently do not support calls on their desktop client. [1]: https://github.com/WhisperSystems/Signal-Desktop

comment by fkistner · 2017-07-03 · in New Skype Update Is Horrible

…API that powers Chrome extensions, Open Whisper Systems refuses to support Firefox, see https://github.com/WhisperSystems/Signal-Desktop/pull/592#is... .

comment by Aaronn · 2017-05-27 · in Chrome Won

…he's missing is about web apps. Whisper Systems is very clear that they're not doing a web version: https://github.com/WhisperSystems/Signal-Desktop/issues/723 If they did, they would be the one holding the keys, not the user. The proposed…

comment by wpietri · 2017-01-28 · in Twitter discloses national security letters

The Signal desktop-app stores all messages unencrypted on the filesystem: https://github.com/WhisperSystems/Signal-Desktop/issues/1017

comment by dbrgn · 2017-01-12 · in Telegram Desktop reaches version 1.0

Wish this issue hadn't been closed. Signal for Firefox is a big missing feature: https://github.com/WhisperSystems/Signal-Desktop/issues/415

comment by fattire · 2017-01-06 · in Choose Firefox Now, Or Later You Won't Get A Choice (2014)

…success with syncing but you may want to post your logs in Github or thumbs up if you are dup of https://github.com/WhisperSystems/Signal-Desktop/issues/909

comment by zmanian · 2016-09-26 · in Desktop support comes to Signal for iPhone

…their app will supposedly run on any OS that Chrome runs. I'm sure that was the intention. [1] https://github.com/WhisperSystems/Signal-Desktop/commits/mas... [2] https://whispersystems.org/#team [3] https://whispersystems.org/workworkwork/…

comment by eatbitseveryday · 2016-08-26 · in “How do I choose not to share my account information with Facebook?”

Signal Desktop has a standalone registration UI that works perfectly fine in the source ( https://github.com/WhisperSystems/Signal-Desktop ), but this hidden feature has been entirely removed from this version. Here is a convoluted process…

comment by Sephr · 2016-05-05 · in Signal Desktop beta now publicly available

Watch for this issue: https://github.com/WhisperSystems/Signal-Desktop/issues/454

comment by qznc · 2016-05-05 · in Signal Desktop beta now publicly available

There's at least some work being done for firefox support: https://github.com/WhisperSystems/Signal-Desktop/pull/574 .

comment by rahiel · 2016-04-07 · in Signal Desktop beta now publicly available

No, not /require/. Here: https://github.com/WhisperSystems/Signal-Desktop (link from the webpage). Go get bower and npm and build it yourself. It'll be a zipfile.

comment by lallysingh · 2015-12-03 · in Signal Desktop

…Signal from a desktop, and am hoping that it gets an actual release date in the next year or so. https://github.com/WhisperSystems/Signal-Desktop

comment by escobar · 2015-12-02 · in WhatsApp is blocking Telegram links

A browser extension for Chrome/Chromium is being worked on! You can track it at https://github.com/WhisperSystems/TextSecure-Browser

comment by lorenzhs · 2015-11-03 · in Signal for Android: RedPhone and TextSecure in one app

Hmm, what I was thinking of as the in-progress desktop client is just a Chrome extension: https://github.com/WhisperSystems/TextSecure-Browser . I hope there's more to come. :\

comment by Perceptes · 2015-10-30 · in Tor Messenger Beta: Chat Over Tor, Easily

…back in on the repo and it looks like a new CONTRIBUTING doc has been added, which is great: https://github.com/WhisperSystems/TextSecure-Browser/blob/ma... This is the type of stuff I was looking for. I'm happy to see WhisperSystems…

comment by dmix · 2015-06-24 · in Telegram Bot Platform

You can help with that if you want: https://github.com/WhisperSystems/TextSecure-Browser

comment by e12e · 2015-05-13 · in Telegram Hits 2B Messages Sent Daily

Re #2: TextSecure has a web/chrome extension version in development: https://github.com/WhisperSystems/TextSecure-Browser

comment by dmix · 2015-05-12 · in BitTorrent Bleep Now Publicly Available Across All Major Platforms

Well they're working on a solution here: https://github.com/WhisperSystems/TextSecure-Browser

comment by explorigin · 2015-04-20 · in Why we don't sell ads – WhatsApp Blog

…It's still under development, but if you're curious you can check out install instructions here: https://github.com/WhisperSystems/TextSecure-Browser/blob/ma...

comment by tga_d · 2015-03-03 · in Signal 2.0 released with private messaging support

That's currently in the works as a browser extension: https://github.com/whispersystems/textsecure-browser You can keep track of its progress there :).

comment by clpwn · 2015-03-03 · in Signal 2.0 released with private messaging support

For desktop- https://github.com/WhisperSystems/TextSecure-Browser

comment by joycey · 2015-03-02 · in Signal 2.0 released with private messaging support

…not just p/t help. Also they have a browser extension that could use some help from front-end devs: https://github.com/WhisperSystems/TextSecure-Browser It is still pretty early but the project has Bithub as well. From my understanding,…

comment by dmix · 2014-11-18 · in Open Whisper Systems partners with WhatsApp to provide end-to-end encryption

…https://github.com/whispersystems/textsecure [5] https://github.com/whispersystems/signal-ios [6] https://github.com/WhisperSystems/TextSecure-Browser/ [7] http://bithub.whispersystems.org/ [8] https://whispersystems.org/blog/bithub/ [9]…

comment by charlieok · 2014-11-18 · in Open Whisper Systems partners with WhatsApp to provide end-to-end encryption

WhisperSystems are working on a web based TextSecure https://github.com/WhisperSystems/TextSecure-Browser

comment by halon · 2014-07-21 · in Flock, Private Contact and Calendar Cloud Sync for Android