Remix.run Logo
▲ dist-epoch 3 hours ago

2 years ago when I got a new phone, I had to re-register in both WhatsApp and Signal.

Both send you a code over SMS. I hate giving apps SMS access, so I refuse SMS intercept permission when an app asks for it, and instead I manually enter the received code in the app.

This was possible in WhatsApp, but was not possible in Signal. It won't allow you. You must give it SMS access to read the code. So much for privacy/security/... Only app I use which didn't allow me to manually enter the SMS code.

▲cocoto 3 hours ago | parent | next [-]

I’m pretty sure it’s for security reasons, it allows the app to ensure the code comes from a correct Signal phone number and not from a third party actor. It’s hand holding yes but it’s a trade off in favor of non-technical users.

▲dist-epoch 3 hours ago | parent | next [-]

Somehow all the other apps, including bank apps, do not seem to consider this necessary.

Signal always has excuses, "we can't add usernames because we don't know how to make them secure"

▲Zak 3 hours ago | parent | next [-]

Bank apps do checklist-oriented security, and nobody has put that on the checklist yet.

▲SoftTalker 39 minutes ago | parent [-]

Banks stand to lose actual money if they screw up. They do a bit more than checklists.

▲slopmaxxing 3 hours ago | parent | prev [-]

[dead]

▲customguy 3 hours ago | parent | prev [-]

> it allows the app to ensure the code comes from a correct Signal phone number and not from a third party actor.

But if they sent you the code, even if a third party actor could somehow see it and hand it to you instead -- so what? What's the difference?

▲slopmaxxing 3 hours ago | parent | prev | next [-]

[dead]

▲fn-mote 3 hours ago | parent | prev [-]

Hate to say it, but if you don’t trust Signal to read your texts… you’ve already lost - stick with Facebook Messenger.

▲gkbrk 3 hours ago | parent | next [-]

Memes I share with friends on Signal and verification codes from my bank with my life savings require very different levels of trust.

Why would I give any app permission to read my messages, no matter how secure it claims to be?

▲Forgeties79 2 hours ago | parent | prev [-]

I understand you’re being a bit overdramatic to make a point, but no, Signal and Facebook messenger are not the same levels of secure for the user. That’s not the same as “trust them wholly,” but surely you understand they are on very different ends of the spectrum.