Security quotes of the week

Posted Apr 22, 2021 3:45 UTC (Thu) by logang (subscriber, #127618)
Parent article: Security quotes of the week

The real gold quote in Moxie's blog comes at the end:

> In completely unrelated news, upcoming versions of Signal will be periodically fetching files to place in app storage. These files are never used for anything inside Signal and never interact with Signal software or data, but they look nice, and aesthetics are important in software. Files will only be returned for accounts that have been active installs for some time already, and only probabilistically in low percentages based on phone number sharding. We have a few different versions of files that we think are aesthetically pleasing, and will iterate through those slowly over time. There is no other significance to these files.

Security quotes of the week

Posted Apr 23, 2021 7:06 UTC (Fri) by elel (guest, #100484) [Link]

I know, lol. If you're using these tools in a place where the results have to hold up in court this will give you no end of headaches. Unfortunately this may not be as effective in all the countries where the tools are in use, depending on how much they care about integrity of evidence.

Security quotes of the week

Posted Apr 23, 2021 13:35 UTC (Fri) by flussence (guest, #85566) [Link]

Perhaps egging on rubber-hose cryptanalysis of his end users is a bad idea, given very recent events with US politics and his own product's reputation.