Lock Down Your Signal: Ultimate Hardening Guide

[@techlore]

Small correction: it’s called ‘screen security’ on Android 😄(The app switching privacy protection) Privacy > Screen Security (support.signal.org/hc/en-us/articles/360043469312-Screen-Security)

[@UCJ7tkLppC69C1r_Je0AZkYg-u]

3:26

[@UCJ7tkLppC69C1r_Je0AZkYg-u]

🎉

[@ToeKneeOooo]

Really impressed that the Signal fork Molly was covered a bit. Well done!

[@PTSigma]

Thanks for all the work spreading word ! :D

[@ScriptureFirst]

0:20 wow! Session FTW! 🙌🏽

[@bolle666]

Session is toast. SimpleX FTW!

[@Foche_T._Schitt]

@@bolle666 Both have terrible names making them impossible to find info with search engines.

[@UCJ7tkLppC69C1r_Je0AZkYg-u]

​@@bolle6663:26 3:26

[@HAVOCSTUDIOS]

If you are an android user you can also switch your keyboard to a more private one, Heliboard (from F-droid) is a private one. Nice video!!! 👍👍👍👍👍👍👍👍👍👍

[@drstewart]

Have you tried the FUTO kb?

[@beatrices.4601]

@@drstewartit’s awesome!

[@Panicthescaredycat]

@@drstewart Wish they had one handed though :( cause i use a Fold 5

[@Mraddy2]

Or disable internet access for whatever keyboard you want to use (gboard for me)

[@timlocke3159]

It's time to release an updated private messenger video including Jami, Threema, Utopia, Aether, Nostr, and Tox.

[@notafbihoneypot8487]

I use Molly, With unifiedpush And encrypt the Database

[@hackerman.1337]

You here xD!

[@darenjones6339]

Really appreciate the comprehensiveness of the information provided; obviously, alot of research. Thank you for such potent and powerful information. We get alot when viewing your videos. Will continue to follow and support you.

[@techlore]

So glad it was helpful!

[@BrandonWAndrews]

Awesome work. Thanks for the guide.

[@jackcheung4301]

If everyone used Signal only and followed the guide completely, all the governments would be in serious trouble.

[@SlingShotKid007]

Love your content, do you have recommendations on the most secure financial brokerages?

[@privacylinegr]

Nice video, good job.

[@sammydepresso]

Fantastic Video, I learned some new things about signal.

[@tiagotiagot]

Link previews are not only a privacy concern, but also a security concern, as you're essentially exposing your Signal app to external code and content, and there is a small chance there could be a 0day in the engine they use that might allow a malicious website to compromise your Signal app or even the whole phone.

[@Danso22]

Great video, unfortunately the Screen Lock feature on android lacks the INSTANT option. Is there any way you could reach that out to the team for them to implement that. Thanks

[@HH-CA]

Signal messenger is the safest

[@Fentonscooby]

Thank you!

[@Motomurphy]

I used molly in the past (December) and had an issue where the storage would just keep inflating no matter how many chats I delete. It was to the point where I had 5gb of chats but molly was consuming 30gb+ of storage space.

[@XSpImmaLion]

Awesome content!

[@Manstrual]

What are your thoughts on GrapheneOS? I really was not considering it given the old leadership, but haven't seen anything blatantly worth avoiding recently. Would you recommend?

[@JohnSon-h1b]

calyx better fr

[@Mr_1077]

I use Calyx and it's really good unless you're a really high-profile induvidual imo

[@цру-х6ю]

I guess calyx has more friendly devs, both communities are good. But GrapheneOS is actually more secure and Google Services implementation is better for security. So choice is up to you. if you dont like daniel micay and dont want use grapheneos because of it - its fine. Im using GrapheneOS, because celebrite cant break it, more security features and so on (idk if celebrite can hack calyx) p.s. im not saying that calyxos is not secure. It is secure, but just for me and my threat model it is better. And CalyxOS is a good OS. Also Daniel is no longer lead developer and dont use social media

[@xade8381]

graphene and divest both good, but he doesn't recommend any. Avoid Calyx tho.

[@Manstrual]

@@xade8381 why?

[@-ixNay-]

What keyboard app or apps do you use for Android? Currently use Openboard

[@ComeOnnBruhh]

Use futo keyboard, that is just OG *private* I'll argue it's better than gboard

[@chuckbarnett_tx]

aosp

[@Manstrual]

@@ComeOnnBruhh futo keyboard is incredible. Using it right now. I can't go back to not having the pinned clipboard buttons on my keyboard that it allows you to have.

[@MonerBilly]

Futo is just the best

[@nrs8043]

Signal is so painful. If I restore my phone - lockout. Start all chats again. And no, the restore from another device is so buggy it really does not work. How can they be this many years into delivering a service and still not know how to give people continuation of their messaging. Secuity teams CAN’T use this app.

[@pedclarkemobile]

I have a 6 digit pin. Hiw long would it take somebody with ability to open signal? I have 24hr delete on all conversations so if I was detained or phone was seized I only need it to last 24 hours because nothing private will be left after the 24h auto delete. I have a problem forgetting PIN numbers but ut kinda defeats the whole privacy objective if my weak link is an easy to crack passcode.

[@sQSZeSV61EU4hyUka2oIx]

still no reply from the privacy coaching lol, I had XMR ready and everything!

[@7XDDM]

So have they patched that desktop security flaw yet? I stopped using it due to this.

[@jordank249]

So far as I know, yes. But even if they didn't, it didn't impact the mobile app at all. They seem to have fixed it in Signal Desktop's Beta, though.

[@2rx_bni]

Same.

[@2rx_bni]

@@jordank249 Yeah but if you use the Beta and try to move to the standard release once it catches up, you can't. They basically lock you into testing or you'll lose all of your messages. That happened to me. I'm very upset about it.

[@jordank249]

@@2rx_bni I disagree that it's being locked into testing, though I don't really value the Desktop much. It's a quirk of how that client is built. The Beta isn't (and shouldn't be) aware of the main client.

[@itbrahh]

Whic vpn country’s you recommend?

[@CrisCheese_]

china is a good vpn country, its a must-have to be connected to a vpn if u ever visit. Also besides cjina is a very beautiful country with lots of sights to see

[@Paragrafo-kw4iu]

i find that i already had done all

[@MKBontwikkeling]

Notification are send to Google or Apples servers. Disabling Name and Message content in notifications you avoid that.

[@techlore]

This was researched on being included in the video, but Signal actually encrypts things differently from most other apps which nullifies most of this issue :) www.medianama.com/2023/12/223-signal-push-notifications-content-meredith-whittaker/ It was considered for the video though!

[@CyberDocUSA]

👍🏻Like #500. Nice work, Henry.

[@UCJ7tkLppC69C1r_Je0AZkYg-u]

3:26 😢

[@Foche_T._Schitt]

I imagine governments have signal accounts with every phone number in their contacts to see who signs up for signal.

[@techlore]

Turn off discovery by phone number...

[@Foche_T._Schitt]

@@techlore Is that before or after you sign up? 😒

[@jordank249]

@@Foche_T._Schitt Even if they did, why does that matter? It wouldn't even be worth the effort since SIGNIFICANTLY more is attached to that phone number beyond "I use Signal."

[@denmaakujin9161]

I keep getting Chinese crypto finishing scams on signal. Somehow my number got leaked, thought the whole point of having phone number on signal was to avoid that.

[@lussor1]

i get contacted by nigerians impersonating korean girls

[@techlore]

Turn off discovery by phone number? That’s an option now. (Covered in the video 😀)

[@ComradeFerret]

Phone numbers are really insecure, I'm not sure why services like Signal and Telegram insist on identifying you by it.

[@MK-of7qw]

@lussor1 I get Chinese hackers posing as Nigerians posing as Korean girls posing as Chinese hackers!

[@Mr.Nichols]

Never in my life have I gotten a RANDOM message on Signal... You leaked your phone number somewhere sadly!

[@youjustgottadrum]

There will be no more end to end with ai chips in phones being released.

[@SimonJPaladinus]

Peertube>>>KZbin

[@UNcommonSenseAUS]

Use session instead

[@drendelous]

they blocked it in russia

[@hiddenknowledge3275]

First

[@xade8381]

or juzt uze matrix

[@2rx_bni]

I'm gonna be so for real, this app is really frustrating to use so I stopped. It shouldn't HAVE to be hardened.

[@etziowingeler3173]

Signal? You're the first person I have ever come across that feels like that

[@jordank249]

Signal doesn't NEED to be hardened. Also, in what way is it "frustrating"? Compared to Session etc, it couldn't be easier to use.

[@kometfan1977]

Who outside of scammers are using Signal?

[@drstewart]

*using WhatsApp? *using Telegram?

[@UNcommonSenseAUS]

1:35 password managers are garbage

[@marcus5551]

How so?

[@UNcommonSenseAUS]

@@marcus5551 never put all your eggs in someone else's basket

[@muffia69]

@@UNcommonSenseAUSyou can self host it yourself or backup the passwords.

[@marcus5551]

@@UNcommonSenseAUS Your alternative? A quality password manager is surely better than many other options. Besides, it is very easy to remediate if you’re that concerned. Just add your own personal salt to any passwords stored in the manager. So if your account or password is compromised, then they only know part of your password. Plus 2FA using an authenticator app or hardware (e.g. Yubikey), should protect your accounts further. In my experience, it is more often phishing or session hijacking that are the predominant route to compromise.

[@marcus5551]

@@UNcommonSenseAUS Fed up of KZbin deleting my comments! I’ll try again later when I’ve got more patience with this piece of 💩

[@GoogleGiveMebackmyname]

molly is great

[@tomeq4993]

Problemem signal jest to że brał pieniądze od amerykańskiego rządu.

[@Quietverszenti-kl6ij]

🗒️✍️

[@LeonEdwinsHeart]

Thank you!