• 6 Posts
  • 517 Comments
Joined 1 year ago
cake
Cake day: August 2nd, 2023

help-circle


















  • mipadaitu@lemmy.worldtoMicroblog Memes@lemmy.worldWWHRD?
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    3
    ·
    edit-2
    9 days ago

    It’s really easy. Do they provide this for all their workers? Is this particular worker being treated to this particular gift when no one else did?

    If this was specifically provided for this worker without input from them, then it’s a problem.

    If everyone in the office gets a chocolate cake with Hennessy, then it’s fine.

    If the worker selected this treat for themselves, then it’s fine.


  • Aside from needing a passkey/passphrase every time you open Signal, what would be the solution? If the user can read the unencrypted messages, then so can malware running as the user.

    Heck, even if you required some sort of authentication to open the messages, malware could just capture that.

    It’s the same problem with browser credential stealing, you can grab all the cookies from an authenticated browser session and copy it to a new system.

    Really, the biggest issue is that Signal doesn’t detect multiple instances running of the same session, but that’s also extremely difficult to do without malware being able to work around it.

    Not saying there’s no solution here, but there is not a simple solution aside from trusting your computer and cancelling sessions if you suspect someone compromised your system (or just not using a desktop app.)