For Signal/Molly, it's less that the notification is encrypted as I understand it. It's more the notification content is just "Hey! Stuff happened" for Signal. The app then reaches out directly to the Signal servers to see what's new. So the message content is never sent via the push notification service (UnifiedPush or Google's service).
dracs
joined 1 year ago
I've got a few old PCI cards around somewhere. I should pull one of them out and give them a try at this.
That would require a lot of data privacy concerns to be addressed. Even if it's an explicit opt-in. The current method uses sample text which can't include PII. Using user supplied text would almost guarantee they'd get names and other PII in their data set.
I also imagine it's harder to train the model when you don't know exactly what the user was trying to type. I.e. Was the swipe detection wrong, or did the user delete the word because they changed their mind on what to write?
The issue isn't a big deal for the average user. The vulnerability required them to first get your username and password, physically steal your Yubikey, spend half a day using $10-15k worth of electronics equipment to repeatedly authenticate over and over, they then could potentially make a clone of the key.
She'll independently recycle your matter into more coffee.
I'd say it's worth doing this regardless to help determine if it's an application or system issue causing them not to go off.
It's a good game. Just don't take the content warning at the start lightly. I've tried to finish it twice but haven't been able to get more than a couple of hours in.
My bonus just came in today. Was planning to order one of these this week. Not sure of I'll wait to see what's happening at PAX. All they've said so far is that Steam will be there.
When I migrated emails last time, I setup my old email to automatically forward to the new email. Then on my new email, I setup an automatic label for any email that was addressed to the old address. Every week or two I'd review what was sent to it and either update the email address used or unsubscribe. Eventually it got to a level where I wasn't getting much at the old email anymore and finally deleted it.
view more: next ›
I'm self hosting both too. MollySocket's docs are pretty clear that it never gets an encryption key for your account, so it can't read your messages. It only gets/forwards alerts that something happened on your account AFAIK. So I'm not sure what data it has that's worth encrypting.