Voluntarily sharing informative posts from unaffiliated sources.

  • 144 Posts
  • 6 Comments
Joined 1 year ago
Cake day: January 16th, 2024
  • ForgottenFlux@lemmy.worldOPtoTechnology@lemmy.world•Signal under fire for storing encryption keys in plaintext on desktop appEnglish
    1·
    9 months ago

    Summary:

    • Signal’s desktop app stores encryption keys for chat history in plaintext, making them accessible to any process on the system
    • Researchers were able to clone a user’s entire Signal session by copying the local storage directory, allowing them to access the chat history on a separate device
    • This issue was previously highlighted in 2018, but Signal has not addressed it, stating that at-rest encryption is not something the desktop app currently provides
    • Some argue this is not a major issue for the “average user”, as other apps also have similar security shortcomings, and users concerned about security should take more extreme measures
    • However, others believe this is a significant security flaw that undermines Signal’s core promise of end-to-end encryption
    • A pull request was made in April 2023 to implement Electron’s safeStorage API to address this problem, but there has been no follow-up from Signal
  • ForgottenFlux@lemmy.worldOPtoTechnology@lemmy.world•All three game console makers, Nintendo, Microsoft, and Sony, have now abandoned X (formerly Twitter) integrationEnglish
    1·
    9 months ago

    Summary:

    • Nintendo has discontinued support for X (formerly Twitter) integration on the Nintendo Switch console.
    • The reason for pulling support is likely due to pricing changes to the X API, which now starts at $42,000 a month for enterprise customers.
    • Microsoft and Sony also removed X integration from their consoles (Xbox and PS5/PS4) last year, but didn’t specify the reason.
    • Slack, a communication platform, also pulled support for X integration due to the API updates impacting its functionality.
    • Console gamers will no longer be able to connect directly with X, despite the X Gaming account claiming that its “partnership with Nintendo remains strong” in a now-deleted post.