foxyoreos (they/it) (🔞) on Nostr: > You can add a registration lock that requires a pin that prevents that kind of ...

> You can add a registration lock that requires a pin that prevents that kind of takeover.

Note that this *expires* if the app is inactive for too long, which is one of the most baffling security decisions I've ever seen.

I think it's reasonable to say that Signal's defaults make it vulnerable to SIM swapping. If you have to teach critters how to secure an account, you're doing something wrong. That pin should be required by default, and should not expire.