2 years ago when I got a new phone, I had to re-register in both WhatsApp and Signal.
Both send you a code over SMS. I hate giving apps SMS access, so I refuse SMS intercept permission when an app asks for it, and instead I manually enter the received code in the app.
This was possible in WhatsApp, but was not possible in Signal. It won't allow you. You must give it SMS access to read the code. So much for privacy/security/... Only app I use which didn't allow me to manually enter the SMS code.
> It won't allow you. You must give it SMS access to read the code
Just tested with latest version of Signal. Can't reproduce. You can just tap away all the prompts, and paste the code.
[dead]
Hate to say it, but if you don’t trust Signal to read your texts… you’ve already lost - stick with Facebook Messenger.
Memes I share with friends on Signal and verification codes from my bank with my life savings require very different levels of trust.
Why would I give any app permission to read my messages, no matter how secure it claims to be?
I understand you’re being a bit overdramatic to make a point, but no, Signal and Facebook messenger are not the same levels of secure for the user. That’s not the same as “trust them wholly,” but surely you understand they are on very different ends of the spectrum.
I’m pretty sure it’s for security reasons, it allows the app to ensure the code comes from a correct Signal phone number and not from a third party actor. It’s hand holding yes but it’s a trade off in favor of non-technical users.
Somehow all the other apps, including bank apps, do not seem to consider this necessary.
Signal always has excuses, "we can't add usernames because we don't know how to make them secure"
Bank apps do checklist-oriented security, and nobody has put that on the checklist yet.
Banks stand to lose actual money if they screw up. They do a bit more than checklists.
My one bank app makes me enable Play Store security. Another one makes me disable developer mode to use NFC payments.
[dead]
[dead]
> it allows the app to ensure the code comes from a correct Signal phone number and not from a third party actor.
But if they sent you the code, even if a third party actor could somehow see it and hand it to you instead -- so what? What's the difference?