TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Signal: Safety number updates

107 点作者 thecoffman超过 8 年前

7 条评论

caf超过 8 年前
Enabling the advisory mode by default seems like a mistake, at least with the current UI. It is so unobtrusive that it carries a very distinct implication of <i>&quot;we&#x27;ve looked into this for you, and you don&#x27;t need to worry about it&quot;</i>, which is not the case. The iconography of the shield also implies this - it says &quot;Signal is protecting you&quot;.<p>The message probably needs to be more explicit: <i>&quot;Voltairine de Cleyre isn&#x27;t using the same safety numbers anymore. Probably this contact just has a new phone or reinstalled Signal, but you might want to confirm the new safety numbers with them.&quot;</i>. And the accompanying icon should be an ! or ? or something.
评论 #12983200 未加载
评论 #12985340 未加载
评论 #12983979 未加载
nickik超过 8 年前
One features that Threema has is that you can see that you have verified the other persons key. I think Signal should have that too. If the other person reinstalls you just drop down back to a lower trust level.<p>Threema does it with 3 dots red, orange ad green, but other versions of this might be experented with.
beardog超过 8 年前
One of Signals worst problems is that it entirely relies on Google to not provide a malicious APK during initial installation of the app.<p>(Yes, it is open source, but most people don&#x27;t have the knowledge or time to compile software themselves)<p>I still think Signal is one of the best secure messengers though.
评论 #12985232 未加载
vengefulduck超过 8 年前
The problem is non security minded users probably won&#x27;t take the time to verify the numbers in the first place. They should look into a method that verifies identities without user interaction. Possibly by having signal store users public keys after they verify their phone numbers or better yet provide users with signed certificates for verification purposes.
评论 #12984431 未加载
评论 #12984046 未加载
breakingcups超过 8 年前
There was something weird going on when I set up Signal for my partner today. She had downloaded and installed Signal through the play store and we tried to scan and exchange safety numbers. My phone gave me the message that <i>her</i> version was outdated. The other way around gave her the same message.<p>When I updated my version it all worked out.
r1ch超过 8 年前
These changes seem to bring it much closer to the implementation in WhatsApp, although WhatsApp defaults to accepting modified fingerprints.
macrael超过 8 年前
How do you view safety numbers on iOS?
评论 #12983325 未加载