141
Molly - a better signal (molly.im)
submitted 2 years ago by to c/privacy@lemmy.ml
128 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 2 years ago (2 children)

What is the difference between regular signal app I am on iOS so doesn’t matter just curious?

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 13 points 2 years ago (2 children)

    Molly is only available on Android, as far as differences it is a hardened fork of signal with an encrypted database, what that means in practice is even if someone was actively probing your phone to try to gain access to messages they wouldn't be able to due to the encryption. It's very useful if you are an active target or you don't trust your phone os to play nice. I personally use it myself and really like it but in general it's not terribly different.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 5 points 2 years ago* (last edited 2 years ago) (1 child)

    [This comment has been deleted by an automated system]

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago* (1 child)

    It's only encrypted in a BFU state, (before first unlock). Police can probe your phone for data using a tool by cellebrite without root. GrapheneOS includes a auto rebooting feature to place it back in a BFU state but other phones will lack this feature. Using Molly's database lock allows you to not trust the OS itself by encrypting it.

    edit: corrected cellbrite to cellebrite

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 years ago* (2 children)

    Yeah I realize it is android only and that makes sense that is exactly what I was looking for surprised signal doesn’t encrypt the database honestly.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 7 points 2 years ago (1 child)

    The main issue with encrypting the database using Molly's setup is you'll miss notifications and calls until you unlock, this might be able to be fixed using a different database encryption setup but as it stands it would be inconvenient for many.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 1 point 2 years ago (1 child)

    It has a completely FOSS version that is available on F-droid. It also implements a pin which signal removed for convenience.

    Its not available for ios

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago (1 child)

    Yeah I know it’s not on iOS I still love Android so I try to stay up to date on Android as well even not having one. My iPhone is paid for by work so I just don’t complain .

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 0 points 2 years ago (1 child)

    For android Lineage os the best with F-droid as a app store.

    Many will disagree with me but Lineage os has the best support and is updated once a month. None of your privacy ROMs can compete with that

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago* (1 child)

    Yeah but Linage OS does not relock the bootloader for extra security so if you lose physical access to your phone it is now vulnerable.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] -4 points 2 years ago (2 children)

    True so don't lose your phone. Its encrypted and you can use third party apps to auto wipe under certain circumstances

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 2 years ago*

    True but I work outside and have lost devices before sometimes it is out of are control and we still misplace devices especially when the fall out a pocket I was only pointing out I personally won’t use it for that reason is all I still would rather use Lineage OS over Graphene OS but I don’t think I will because of that one thing. I am looking at buying a used pixel hopefully soon.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 years ago (1 child)

    the more third party apps you have, the higher your attack surface and a decrease in security. I love my mods but this isn't really a solution and should be an os feature.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 0 points 2 years ago (1 child)

    How would that be implemented? The way stock does it is though proprietary software

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    what is proprietary about a locked bootloader? the only android fork i can recommend is GrapheneOS. you relock the bootloader on that as well.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 1 point 2 years ago (1 child)

    Oh, I though you were talking about lock out and findmydevice

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    find my device would be more difficult to implement without a decently sized company backing it but a lock out function wouldn't be that difficult. it just needs to be implemented into the os itself rather than rely on the trustworthiness of a third party dev.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •