← @kwm Twitter archive

Keith

@kwm

Correction: macOS @signalapp (Signal Desktop) *does* correctly remove expired media.

However, Signal Desktop still stores a wealth of unencrypted information on disk, including:

- contacts
- conversation metadata (name, phone no.)
- attachment metadata
- attachments https://twitter.com/kwm/status/1054165042738880512

10/22/2018, 2:39:08 PM

Favs: 3

Retweets: 2

Keith

@kwm

@signalapp To view macOS @signalapp (Signal Desktop) attachments that are stored locally, unencrypted:

find ~/Library/Application\ Support/Signal/ -type f -print0 | xargs -0 file | grep attachments

10/22/2018, 2:40:02 PM

Favs: 2

Retweets: 0

Keith

@kwm

To view macOS @signalapp (Signal Desktop) database strings, which include:

- contact names
- contact phone numbers
- conversation metadata
- attachment metadata (file types, etc.)

find ~/Library/Application\ Support/Signal/IndexedDB/ -type f -print0 | xargs -0 strings

10/22/2018, 2:43:18 PM

Favs: 1

Retweets: 1