▲ 195 ▼ Signal president warns AI agents are making encryption irrelevant (cyberinsider.com) submitted 9 months ago by Blaze@piefed.zip to c/privacy@programming.dev 19 comments fedilink hide all child comments
[–] chaotic_disorganizer@lemmy.world 68 points 9 months ago (15 children) Oh no! If only there was an alternative operating system! permalink fedilink source hideshow 15 child comments replies: [–] unexposedhazard@discuss.tchncs.de 28 points 9 months ago (5 children) And if only Signal would finally fucking move away from their phone centric model and offer proper desktop applications. permalink fedilink source parent hideshow 5 child comments replies: [–] scytale@piefed.zip 17 points 9 months ago (1 child) I randomly met one of their devs at a basketball pickup game. At the time he was a new hire and he said his primary role would be to work on the desktop app. He said they were only 2 people in the team as of his joining. I told him the app in its current state (at the time) was still so basic and definitely needs more attention. permalink fedilink source parent hideshow 1 child comment replies: [–] unexposedhazard@discuss.tchncs.de 6 points 9 months ago* As long as they dont implement proper multi session, i will never be a fan. With how bad their backup system works, its just too janky. permalink fedilink source parent [–] PokerChips@programming.dev 2 points 9 months ago (2 children) What's wrong with their desktop application? I remember using it 5 to 7 years ago and it seemed fine. I just found out to be weird to keep my text messages on a computer that anybody can see that might use my computer so I quit using the desktop version. permalink fedilink source parent hideshow 2 child comments replies: [–] unexposedhazard@discuss.tchncs.de 4 points 9 months ago (1 child) The desktop application is just a temporary web session in a box. You cant recover your account from it, so if you lose your phone, you will eventually lose access to your account and messages. on a computer that anybody can see that might use my computer Why dont you have access restrictions on your computer? Literally any operating system allows you to just set a password... permalink fedilink source parent hideshow 1 child comment replies: [–] PokerChips@programming.dev 1 point 9 months ago My laptop is encrypted but once it's open I turn the password off because I just get tired of typing the password every time I sit down. I'm not too worried about people in my house digging into my laptop. Text messages OTOH, is a whole other level. permalink fedilink source parent [–] brillotti@lemmy.world 27 points 9 months ago (1 child) The people you message will be using standard systems. permalink fedilink source parent hideshow 1 child comment replies: [–] Butterphinger@lemmy.zip 3 points 9 months ago* Anonymous methods are known. You can retain anonymity regardless of what Fed can peek into the box. We accept this as a necessary evil to XMPP rooms. 1/3 of the room might be running Ai agents on their screens, so, the international spy network knows what everyone's doing... but they have no fucking clue who the other 2/3 is, nor is the history constantly browsable, mostly pieces at a time. In a room with friends who know who you are, the relationship would become more obvious. permalink fedilink source parent [–] deliriousdreams@fedia.io 9 points 9 months ago* (last edited 9 months ago) (2 children) Android has a market share of something like 42.5%. Google is adding Gemini to devices I'm in a way that gives Gemini core android apps permissions. Right now these settings can be changed, but the default settings give this access. It's not just MS. permalink fedilink source parent hideshow 2 child comments replies: [–] JackbyDev@programming.dev 2 points 9 months ago (1 child) What settings do I change and how? Thanks in advance. 💜 permalink fedilink source parent hideshow 1 child comment replies: [–] deliriousdreams@fedia.io 4 points 9 months ago* Gmail: Click the gear icon in the top right of Gmail > See All Settings. From there, turn off Smart Compose, Smart Compose Personalization, and Smart Reply. (There’s also the Smart Features setting, which turns off everything even remotely AI-related, but that will also disable spelling and grammar check.) On device: Open the Gemini app on your Android. Tap your profile icon in the top-right corner. Go to Gemini Apps Activity. Tap Turn off Turn off and delete activity, and follow the prompts. Select your profile icon again and go to Apps. Tap the toggle switch to prevent Gemini from interacting with Google apps and third-party services. Avoid using Gemini Deep Research with Gmail, Drive, or Chat (these sources are turned off by default). If you have already selected them when enabling Deep Research, open Sources* and clear their checkboxes. Once that's done, disable the app or remove it if your device allows that. permalink fedilink source parent [–] sukhmel@programming.dev 8 points 9 months ago (3 children) In O’Reilly’s Clawdbot research, he identified hundreds of exposed control panels reachable over the public internet, some lacking any authentication. These interfaces provided access to full conversation histories, API keys, OAuth tokens, and command execution features across services including Slack, Telegram, Discord, WhatsApp, and Signal. In several instances, Signal device-pairing data was stored in plaintext, enabling attackers to take over accounts remotely. Sounds like people can set it up on their own in any OS, but I admit that I didn't exactly understand what that control panels are permalink fedilink source parent hideshow 3 child comments replies: [–] JubilantJaguar@lemmy.world 6 points 9 months ago (1 child) Was just about to quote the same passage with the same question! Seems we're not familiar with what the kids are doing with AI. Before, normies didn't know what they were doing and so they couldn't do it. Now they can go ahead and do it anyway. Technical ignorance is about to become a serious problem. permalink fedilink source parent hideshow 1 child comment replies: [–] lambalicious@lemmy.sdf.org 5 points 9 months ago Normies (and corporate) ruining everything, as always. permalink fedilink source parent [–] scytale@piefed.zip 3 points 9 months ago Yeah, in this case the OS doesn’t really matter if the person willingly (or unknowingly) installs an AI agent (assuming it’s compatible with linux as well). permalink fedilink source parent
[–] unexposedhazard@discuss.tchncs.de 28 points 9 months ago (5 children) And if only Signal would finally fucking move away from their phone centric model and offer proper desktop applications. permalink fedilink source parent hideshow 5 child comments replies: [–] scytale@piefed.zip 17 points 9 months ago (1 child) I randomly met one of their devs at a basketball pickup game. At the time he was a new hire and he said his primary role would be to work on the desktop app. He said they were only 2 people in the team as of his joining. I told him the app in its current state (at the time) was still so basic and definitely needs more attention. permalink fedilink source parent hideshow 1 child comment replies: [–] unexposedhazard@discuss.tchncs.de 6 points 9 months ago* As long as they dont implement proper multi session, i will never be a fan. With how bad their backup system works, its just too janky. permalink fedilink source parent [–] PokerChips@programming.dev 2 points 9 months ago (2 children) What's wrong with their desktop application? I remember using it 5 to 7 years ago and it seemed fine. I just found out to be weird to keep my text messages on a computer that anybody can see that might use my computer so I quit using the desktop version. permalink fedilink source parent hideshow 2 child comments replies: [–] unexposedhazard@discuss.tchncs.de 4 points 9 months ago (1 child) The desktop application is just a temporary web session in a box. You cant recover your account from it, so if you lose your phone, you will eventually lose access to your account and messages. on a computer that anybody can see that might use my computer Why dont you have access restrictions on your computer? Literally any operating system allows you to just set a password... permalink fedilink source parent hideshow 1 child comment replies: [–] PokerChips@programming.dev 1 point 9 months ago My laptop is encrypted but once it's open I turn the password off because I just get tired of typing the password every time I sit down. I'm not too worried about people in my house digging into my laptop. Text messages OTOH, is a whole other level. permalink fedilink source parent
[–] scytale@piefed.zip 17 points 9 months ago (1 child) I randomly met one of their devs at a basketball pickup game. At the time he was a new hire and he said his primary role would be to work on the desktop app. He said they were only 2 people in the team as of his joining. I told him the app in its current state (at the time) was still so basic and definitely needs more attention. permalink fedilink source parent hideshow 1 child comment replies: [–] unexposedhazard@discuss.tchncs.de 6 points 9 months ago* As long as they dont implement proper multi session, i will never be a fan. With how bad their backup system works, its just too janky. permalink fedilink source parent
[–] unexposedhazard@discuss.tchncs.de 6 points 9 months ago* As long as they dont implement proper multi session, i will never be a fan. With how bad their backup system works, its just too janky. permalink fedilink source parent
[–] PokerChips@programming.dev 2 points 9 months ago (2 children) What's wrong with their desktop application? I remember using it 5 to 7 years ago and it seemed fine. I just found out to be weird to keep my text messages on a computer that anybody can see that might use my computer so I quit using the desktop version. permalink fedilink source parent hideshow 2 child comments replies: [–] unexposedhazard@discuss.tchncs.de 4 points 9 months ago (1 child) The desktop application is just a temporary web session in a box. You cant recover your account from it, so if you lose your phone, you will eventually lose access to your account and messages. on a computer that anybody can see that might use my computer Why dont you have access restrictions on your computer? Literally any operating system allows you to just set a password... permalink fedilink source parent hideshow 1 child comment replies: [–] PokerChips@programming.dev 1 point 9 months ago My laptop is encrypted but once it's open I turn the password off because I just get tired of typing the password every time I sit down. I'm not too worried about people in my house digging into my laptop. Text messages OTOH, is a whole other level. permalink fedilink source parent
[–] unexposedhazard@discuss.tchncs.de 4 points 9 months ago (1 child) The desktop application is just a temporary web session in a box. You cant recover your account from it, so if you lose your phone, you will eventually lose access to your account and messages. on a computer that anybody can see that might use my computer Why dont you have access restrictions on your computer? Literally any operating system allows you to just set a password... permalink fedilink source parent hideshow 1 child comment replies: [–] PokerChips@programming.dev 1 point 9 months ago My laptop is encrypted but once it's open I turn the password off because I just get tired of typing the password every time I sit down. I'm not too worried about people in my house digging into my laptop. Text messages OTOH, is a whole other level. permalink fedilink source parent
[–] PokerChips@programming.dev 1 point 9 months ago My laptop is encrypted but once it's open I turn the password off because I just get tired of typing the password every time I sit down. I'm not too worried about people in my house digging into my laptop. Text messages OTOH, is a whole other level. permalink fedilink source parent
[–] brillotti@lemmy.world 27 points 9 months ago (1 child) The people you message will be using standard systems. permalink fedilink source parent hideshow 1 child comment replies: [–] Butterphinger@lemmy.zip 3 points 9 months ago* Anonymous methods are known. You can retain anonymity regardless of what Fed can peek into the box. We accept this as a necessary evil to XMPP rooms. 1/3 of the room might be running Ai agents on their screens, so, the international spy network knows what everyone's doing... but they have no fucking clue who the other 2/3 is, nor is the history constantly browsable, mostly pieces at a time. In a room with friends who know who you are, the relationship would become more obvious. permalink fedilink source parent
[–] Butterphinger@lemmy.zip 3 points 9 months ago* Anonymous methods are known. You can retain anonymity regardless of what Fed can peek into the box. We accept this as a necessary evil to XMPP rooms. 1/3 of the room might be running Ai agents on their screens, so, the international spy network knows what everyone's doing... but they have no fucking clue who the other 2/3 is, nor is the history constantly browsable, mostly pieces at a time. In a room with friends who know who you are, the relationship would become more obvious. permalink fedilink source parent
[–] deliriousdreams@fedia.io 9 points 9 months ago* (last edited 9 months ago) (2 children) Android has a market share of something like 42.5%. Google is adding Gemini to devices I'm in a way that gives Gemini core android apps permissions. Right now these settings can be changed, but the default settings give this access. It's not just MS. permalink fedilink source parent hideshow 2 child comments replies: [–] JackbyDev@programming.dev 2 points 9 months ago (1 child) What settings do I change and how? Thanks in advance. 💜 permalink fedilink source parent hideshow 1 child comment replies: [–] deliriousdreams@fedia.io 4 points 9 months ago* Gmail: Click the gear icon in the top right of Gmail > See All Settings. From there, turn off Smart Compose, Smart Compose Personalization, and Smart Reply. (There’s also the Smart Features setting, which turns off everything even remotely AI-related, but that will also disable spelling and grammar check.) On device: Open the Gemini app on your Android. Tap your profile icon in the top-right corner. Go to Gemini Apps Activity. Tap Turn off Turn off and delete activity, and follow the prompts. Select your profile icon again and go to Apps. Tap the toggle switch to prevent Gemini from interacting with Google apps and third-party services. Avoid using Gemini Deep Research with Gmail, Drive, or Chat (these sources are turned off by default). If you have already selected them when enabling Deep Research, open Sources* and clear their checkboxes. Once that's done, disable the app or remove it if your device allows that. permalink fedilink source parent
[–] JackbyDev@programming.dev 2 points 9 months ago (1 child) What settings do I change and how? Thanks in advance. 💜 permalink fedilink source parent hideshow 1 child comment replies: [–] deliriousdreams@fedia.io 4 points 9 months ago* Gmail: Click the gear icon in the top right of Gmail > See All Settings. From there, turn off Smart Compose, Smart Compose Personalization, and Smart Reply. (There’s also the Smart Features setting, which turns off everything even remotely AI-related, but that will also disable spelling and grammar check.) On device: Open the Gemini app on your Android. Tap your profile icon in the top-right corner. Go to Gemini Apps Activity. Tap Turn off Turn off and delete activity, and follow the prompts. Select your profile icon again and go to Apps. Tap the toggle switch to prevent Gemini from interacting with Google apps and third-party services. Avoid using Gemini Deep Research with Gmail, Drive, or Chat (these sources are turned off by default). If you have already selected them when enabling Deep Research, open Sources* and clear their checkboxes. Once that's done, disable the app or remove it if your device allows that. permalink fedilink source parent
[–] deliriousdreams@fedia.io 4 points 9 months ago* Gmail: Click the gear icon in the top right of Gmail > See All Settings. From there, turn off Smart Compose, Smart Compose Personalization, and Smart Reply. (There’s also the Smart Features setting, which turns off everything even remotely AI-related, but that will also disable spelling and grammar check.) On device: Open the Gemini app on your Android. Tap your profile icon in the top-right corner. Go to Gemini Apps Activity. Tap Turn off Turn off and delete activity, and follow the prompts. Select your profile icon again and go to Apps. Tap the toggle switch to prevent Gemini from interacting with Google apps and third-party services. Avoid using Gemini Deep Research with Gmail, Drive, or Chat (these sources are turned off by default). If you have already selected them when enabling Deep Research, open Sources* and clear their checkboxes. Once that's done, disable the app or remove it if your device allows that. permalink fedilink source parent
[–] sukhmel@programming.dev 8 points 9 months ago (3 children) In O’Reilly’s Clawdbot research, he identified hundreds of exposed control panels reachable over the public internet, some lacking any authentication. These interfaces provided access to full conversation histories, API keys, OAuth tokens, and command execution features across services including Slack, Telegram, Discord, WhatsApp, and Signal. In several instances, Signal device-pairing data was stored in plaintext, enabling attackers to take over accounts remotely. Sounds like people can set it up on their own in any OS, but I admit that I didn't exactly understand what that control panels are permalink fedilink source parent hideshow 3 child comments replies: [–] JubilantJaguar@lemmy.world 6 points 9 months ago (1 child) Was just about to quote the same passage with the same question! Seems we're not familiar with what the kids are doing with AI. Before, normies didn't know what they were doing and so they couldn't do it. Now they can go ahead and do it anyway. Technical ignorance is about to become a serious problem. permalink fedilink source parent hideshow 1 child comment replies: [–] lambalicious@lemmy.sdf.org 5 points 9 months ago Normies (and corporate) ruining everything, as always. permalink fedilink source parent [–] scytale@piefed.zip 3 points 9 months ago Yeah, in this case the OS doesn’t really matter if the person willingly (or unknowingly) installs an AI agent (assuming it’s compatible with linux as well). permalink fedilink source parent
[–] JubilantJaguar@lemmy.world 6 points 9 months ago (1 child) Was just about to quote the same passage with the same question! Seems we're not familiar with what the kids are doing with AI. Before, normies didn't know what they were doing and so they couldn't do it. Now they can go ahead and do it anyway. Technical ignorance is about to become a serious problem. permalink fedilink source parent hideshow 1 child comment replies: [–] lambalicious@lemmy.sdf.org 5 points 9 months ago Normies (and corporate) ruining everything, as always. permalink fedilink source parent
[–] lambalicious@lemmy.sdf.org 5 points 9 months ago Normies (and corporate) ruining everything, as always. permalink fedilink source parent
[–] scytale@piefed.zip 3 points 9 months ago Yeah, in this case the OS doesn’t really matter if the person willingly (or unknowingly) installs an AI agent (assuming it’s compatible with linux as well). permalink fedilink source parent