signalapp/Signal-Desktop on Hacker News

▲ 74

story by maverick74 · 2021-01-14 · 96 comments

…icon, as you can in iMessage, but the maintainers don't seem to be particularly interested: https://github.com/signalapp/Signal-Desktop/issues/2510

comment by cmg · 2020-12-15 · in Adding Encrypted Group Calls to Signal

…few to extensively use Rust in production. I was really sad to see they hire in the US only. [1] https://github.com/signalapp/Signal-Desktop/issues/1630

comment by axegon_ · 2020-12-15 · in Adding Encrypted Group Calls to Signal

https://github.com/signalapp/Signal-Desktop/issues/530 Signal still has usability annoyances, like this one where they decided to remove the UI for creating and leaving group chats from the desktop version in an impulse half a decade ago,…

comment by throwaway79fdg4 · 2020-11-17 · in Using Matrix to replace proprietary and centralized chat apps

To your point: https://github.com/signalapp/Signal-Desktop/issues/4578

comment by sneak · 2020-10-20 · in Moxie Marlinspike has a plan to reclaim our privacy

▲ 107

Leaving Spellcheck Enabled Is a Privacy Risk (2016)

story by behnamoh · 2020-05-10 · 39 comments

…tried any of that, are any of them even possible? [0]: https://github.com/signalapp/Signal-iOS [1]: https://github.com/signalapp/Signal-Desktop [2]: https://github.com/signalapp/Signal-Server

comment by sixstringtheory · 2020-02-20 · in Stop Using Encrypted Email

…[2]: https://github.com/signalapp/Signal-Android [3]: https://github.com/signalapp/Signal-iOS [4]: https://github.com/signalapp/Signal-Desktop

comment by cyphar · 2020-02-15 · in Signal is finally bringing its secure messaging to the masses

…since at least mid 2018. There is an open github issue, where the maintainers don't really respond: https://github.com/signalapp/Signal-Desktop/issues/2634 They statically link a openssl library for their forked version of sqlcipher, which…

comment by bpfrh · 2020-02-14 · in Signal is finally bringing its secure messaging to the masses

…correct credentials? It's possible to link and use several desktop clients at the same time. [0] https://github.com/signalapp/Signal-Desktop/blob/development... [1] https://github.com/AsamK/signal-cli [2]…

comment by mfwoods · 2020-02-14 · in Signal is finally bringing its secure messaging to the masses

…does anyone else. Maybe a less hostile approach towards community would yield better results. 2) https://github.com/signalapp/Signal-Desktop/issues/530 While I agree with you that this Matrix e2ee thing has took way, way too long, let's…

comment by Dddd50000 · 2020-01-05 · in On Privacy versus Freedom

…please check out the current beta build, which has a potential fix for the interactivity problems. https://github.com/signalapp/Signal-Desktop/issues/2703 You seem extremely over-entitled.

comment by kick · 2019-10-24 · in Signal Technology Foundation is now open for donations

…might make sense for Signalin the desktop not sure. Also the messages are stored in plaintext: https://github.com/signalapp/Signal-Desktop/issues/1017 They say it's a non-fix cause you can use full disk encryption, and honestly that's what…

comment by giancarlostoro · 2019-02-05 · in Vuvuzela: Metadata-private messaging

…in the first place. [0]: https://en.wikipedia.org/wiki/Defense_in_depth_%28computing%... [1]: https://github.com/signalapp/Signal-Desktop/blob/development...

comment by danShumway · 2018-10-30 · in World of Warcraft: one simple line of code can cost you dearly (2016)

…grrowl copied and repasted the truncated display text of the link. The full link is 2 comments up: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616...

comment by Stephen304 · 2018-05-19 · in Another flaw in Signal desktop app leaks chats in plaintext

> The Signal devs thought $.html() does some kind of escaping: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616... . (this commit made something that was easy to exploit into something that was even easier to exploit). This is…

comment by grrowl · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

This doesn't seem to be true, here's the v1.10.0 code: https://github.com/signalapp/Signal-Desktop/blob/f6eb745632c... They do seem to be using react, and using dangerouslySetInnerHTML. Now that said, I haven't confirmed that this is the…

comment by archgoon · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

…know if this is exploitable, but they are using many different methods to escape HTML content: https://github.com/signalapp/Signal-Desktop/blob/d1f7f5ee8c1... Then here it's a different function: https://github.com/signalapp/Signal-Desktop/…

comment by ddtaylor · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

…it and run the resulting binary. The Signal devs thought $.html() does some kind of escaping: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616... (this commit made something that was easy to exploit into something that was even…

comment by rndgermandude · 2018-05-18 · in Another flaw in Signal desktop app leaks chats in plaintext

…not to eager to trust people writing commit messages like this and then OK that during peer review: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616... > Remove escaping from `linkText` > We leverage jQuery’s HTML escaping in…

comment by rndgermandude · 2018-05-16 · in Signal-desktop HTML tag injection advisory

…constructing raw SQL requests where parameterized queries suffice. Thankfully, it was just fixed: https://github.com/signalapp/Signal-Desktop/commit/4e5c8965f...

comment by ycmbntrthrwaway · 2018-05-16 · in Signal-desktop HTML tag injection advisory

Electron is unsafe because it's based on outdated versions of Chromium: https://github.com/signalapp/Signal-Desktop/issues/1635

comment by jsnar · 2018-05-12 · in Remote zero-click JavaScript code execution on Signal desktop

Signal desktop app is based on the insecure Electron runtime. See my report here: https://github.com/signalapp/Signal-Desktop/issues/1635

comment by jsnar · 2018-05-11 · in Remote zero-click JavaScript code execution on Signal desktop

It has a desktop app for MacOS, Linux and Windows. https://github.com/signalapp/Signal-Desktop

comment by sashimy · 2018-04-09 · in Reverse Engineering WhatsApp Web

…stays visible in task list. No thank you, but I refuse to use electron-based "native" apps. [1] https://github.com/signalapp/Signal-Desktop/issues/1119

comment by perakojotgenije · 2018-03-23 · in Telegram: 200M Monthly Active Users

…- wanna help us test proxy and system tray support? Tray support behind command-line argument: https://github.com/signalapp/Signal-Desktop/pull/1676 Proxy support behind command-line argument: https://github.com/signalapp/Signal-Desktop/pul…

comment by scottnonnenberg · 2018-02-22 · in Signal Foundation

…[2]: https://whispersystems.discoursehosting.net/t/encrypted-back... [3]: https://github.com/signalapp/Signal-Desktop/issues/522 [4]: https://github.com/signalapp/Signal-Android/pull/7380 [5]: https://whispersystems.discoursehosting

comment by wfn · 2018-02-21 · in Signal Foundation

▲ 2

Web hosted version of Signal-Desktop

story by tosh · 2017-11-06 · 0 comments

No proxy support, so I can't use it in my corporate environment. https://github.com/WhisperSystems/Signal-Desktop/issues/1632 Also a bit annoying that it can't be run in the background, at least on Windows.…

comment by andyjh · 2017-11-01 · in Standalone Signal Desktop

Link to lower the barrier: https://github.com/WhisperSystems/Signal-Desktop/issues/new

comment by Vinnl · 2017-11-01 · in Standalone Signal Desktop

submitted issue for this: https://github.com/WhisperSystems/Signal-Desktop/issues/1635

comment by jsnar · 2017-11-01 · in Standalone Signal Desktop

Does it still store all data unencrypted on the disk? https://github.com/WhisperSystems/Signal-Desktop/issues/1017

comment by dbrgn · 2017-11-01 · in Standalone Signal Desktop

…probably be enabled in a production build with little modifications. This might get you started: https://github.com/WhisperSystems/Signal-Desktop/blob/d1f7f5...

comment by mfwoods · 2017-10-31 · in Standalone Signal Desktop

Why no web app? Moxie closed https://github.com/WhisperSystems/Signal-Desktop/issues/723 without giving any reasoning. Can someone link me to a blog post that explains why Signal is refusing to release a web version? I cannot run another…

comment by nikisweeting · 2017-10-31 · in Standalone Signal Desktop

…user base. Give us a github repo and we can build it ourself. Let me see if I can find one. Edit: https://github.com/WhisperSystems/Signal-Desktop

comment by noja · 2017-10-31 · in Standalone Signal Desktop

…[1], but you are correct in that they currently do not support calls on their desktop client. [1]: https://github.com/WhisperSystems/Signal-Desktop

comment by fkistner · 2017-07-03 · in New Skype Update Is Horrible

…API that powers Chrome extensions, Open Whisper Systems refuses to support Firefox, see https://github.com/WhisperSystems/Signal-Desktop/pull/592#is... .

comment by Aaronn · 2017-05-27 · in Chrome Won

…he's missing is about web apps. Whisper Systems is very clear that they're not doing a web version: https://github.com/WhisperSystems/Signal-Desktop/issues/723 If they did, they would be the one holding the keys, not the user. The proposed…

comment by wpietri · 2017-01-28 · in Twitter discloses national security letters

The Signal desktop-app stores all messages unencrypted on the filesystem: https://github.com/WhisperSystems/Signal-Desktop/issues/1017

comment by dbrgn · 2017-01-12 · in Telegram Desktop reaches version 1.0

Wish this issue hadn't been closed. Signal for Firefox is a big missing feature: https://github.com/WhisperSystems/Signal-Desktop/issues/415

comment by fattire · 2017-01-06 · in Choose Firefox Now, Or Later You Won't Get A Choice (2014)

…success with syncing but you may want to post your logs in Github or thumbs up if you are dup of https://github.com/WhisperSystems/Signal-Desktop/issues/909

comment by zmanian · 2016-09-26 · in Desktop support comes to Signal for iPhone

…their app will supposedly run on any OS that Chrome runs. I'm sure that was the intention. [1] https://github.com/WhisperSystems/Signal-Desktop/commits/mas... [2] https://whispersystems.org/#team [3] https://whispersystems.org/workworkwork/…

comment by eatbitseveryday · 2016-08-26 · in “How do I choose not to share my account information with Facebook?”

Signal Desktop has a standalone registration UI that works perfectly fine in the source ( https://github.com/WhisperSystems/Signal-Desktop ), but this hidden feature has been entirely removed from this version. Here is a convoluted process…

comment by Sephr · 2016-05-05 · in Signal Desktop beta now publicly available

Watch for this issue: https://github.com/WhisperSystems/Signal-Desktop/issues/454

comment by qznc · 2016-05-05 · in Signal Desktop beta now publicly available

There's at least some work being done for firefox support: https://github.com/WhisperSystems/Signal-Desktop/pull/574 .

comment by rahiel · 2016-04-07 · in Signal Desktop beta now publicly available

▲ 2

Signal private messenger as Chrome extension for the desktop

story by JoachimS · 2015-12-03 · 0 comments

No, not /require/. Here: https://github.com/WhisperSystems/Signal-Desktop (link from the webpage). Go get bower and npm and build it yourself. It'll be a zipfile.

comment by lallysingh · 2015-12-03 · in Signal Desktop

…Signal from a desktop, and am hoping that it gets an actual release date in the next year or so. https://github.com/WhisperSystems/Signal-Desktop

comment by escobar · 2015-12-02 · in WhatsApp is blocking Telegram links

A browser extension for Chrome/Chromium is being worked on! You can track it at https://github.com/WhisperSystems/TextSecure-Browser

comment by lorenzhs · 2015-11-03 · in Signal for Android: RedPhone and TextSecure in one app

Hmm, what I was thinking of as the in-progress desktop client is just a Chrome extension: https://github.com/WhisperSystems/TextSecure-Browser . I hope there's more to come. :\

comment by Perceptes · 2015-10-30 · in Tor Messenger Beta: Chat Over Tor, Easily