• LWD@lemm.ee
    link
    fedilink
    English
    arrow-up
    6
    ·
    4 days ago

    Do you have any linked devices, especially ones using Molly?

    I wouldn’t sweat the username thing too much, as they are not meant to stick around forever by design. Better they break than get compromised.

    • CameronDevOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 days ago

      Desktop signal yes.

      Doesn’t having them expire/get reused open them up to impersonation attacks?

      • LWD@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        ·
        4 days ago

        It could, but that’s why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.

        I’m not sure if Signal mitigates username impersonation in some way though.

        • CameronDevOP
          link
          fedilink
          English
          arrow-up
          2
          ·
          4 days ago

          Hopefully by “taken” it means that it is in some kind of cooldown before it can be used again.