CloudflareCDN 0click location deanonymization attack targeting Signal, Discord and other platforms

Well, I don’t agree with most of their excuses about not implementing some feature due to X reasons, take for example, local database encryption. Moxie (ex-signal dev) didn’t want to implement it because he believed that “it will be stored in memory forever at first unlock”, but Molly dev proved him wrong. There are multiple features that Signal just refuses to implement when it is entirely possible and will vastly improve user’s privacy or security.

Molly kept adding such features while Signal deliberately didn’t do anything remarkable at all other than cryptography (which I respect btw), it is just a part of what makes messenger secure, there are a lot of other attack vectors you should be putting into account and mitigate when you are providing people with a whole instant messaging app and not just providing cryptographic primitives.

Here’s a list of what features Molly have & going to have: Recommend Molly alongside Signal - #11 by jerm.

4 Likes