Total convenience vs security facepalm. We audit Signal’s crypto but the OS just pipes the plaintext into a local notification DB by default. If data isnt persisted, it cant be forensically extracted later. Honestly, sometimes the best privacy feature is just not having a database at all.
Discussions (565 points, 282 comments) https://news.ycombinator.com/item?id=47716490
(81 points, 27 comments) https://news.ycombinator.com/item?id=47703573
Total convenience vs security facepalm. We audit Signal’s crypto but the OS just pipes the plaintext into a local notification DB by default. If data isnt persisted, it cant be forensically extracted later. Honestly, sometimes the best privacy feature is just not having a database at all.