Good luck finding a messenger app that can help you when "they have root access to my phone" is in your threat model. Not sure what you expect Signal to do about this...
Be upfront about it. The vast majority of their users, even those who should know better do not realize this.
0days are not that expensive. Within reach of practically any bad guy really.
They are highly proud of Snowden recommending them. But anyone operating on the level he did is a moron to trust Signal. So what the fuck?
There are no apps that resist the phone being rooted. Everyone is vulnerable to 0days by definition.
I don't know why everybody is repeating this as if I somehow don't understand that. My point is Signal is promoted as some sort of panacea by security professionals even though all that security can be bypassed, likely routinely by actual bad guys.
Has he ever said that Signal is the end-all, perfect solution that will prevent all kinds of threats and provide perfect privacy? I am sure there is a lot of sloppy messaging out there, but an endorsement along the lines of "I trust Signal's encryption and that it's not backdoored" is not unreasonable
so you're user YES, which is NO-root, but YES
rm -rf /
Great Sucess.
NO or NON root system, it seems like a marketable gimmick.
Must be up your people's ass.
Just checked, Signal has this; does this actually serve to unencrypt the encryption key or is that still accessible as root?