Felix

Passwordmanager-Enthusiast.

My current project:
https://roundsync.com

formerly: newhinton@fosstodon.org

I really do need a better profile pic🌴

Last Notes

2026-03-14 15:34:35 UTC

- reply

You can only import a local backup when you set up signal the first time (on a device)
So if you tried to use signal on the new phone already, you might need to reinstall it.

2025-07-03 21:42:43 UTC

- reply

I still haven't found out what the actual issue is. You seem to add a permission for the sensors to apps, and then updating/installing apps reports a different set of permissions from the apps manifest, leading to fdroid notifying the users about it.
Ignoring the absolutely useless implementation of *how* they notify, isn't this generally a good thing?
(I see why you add it, and i don't disagree with it, i just don't see where the friction comes from between fdroid and gos here)

2025-06-21 21:38:15 UTC

- reply

That's one thing i don't quite understand with grapheneos.
Why the rush with new major versions? It seems like you work on android 16 support like hell, is there a reason why it can't be delayed? Don't older versions like 15 recieve security patches anymore?
Don't get me wrong, i seriously enjoy your work, and many of the additional features you provide have become must haves for me, but i don't mind waiting for quality work, especially 1/2

2025-06-05 06:12:11 UTC

- reply

prevent account recovery *at all* even for legitimate users, requiring them to get a new phone number.
Also, at least on android, you cannot get around of a password for the backups. (If you accept the premise of backups needing encryption, which is open to debate) It has different requirements than a pin, and therefore need to be different. But the main point is: not everyone *needs* backups, and are fine with loosing them, so this should indeed be optional.
However, 2/3

2025-06-05 06:05:18 UTC

- reply

I agree with the opt-out for the registration lock, but i don't see why the expiry is an issue. The registration lock is lifted after a week of inactivity of *all* devices.
Reregistering the number (w/o pin) would immediately clear all accociated data, AND notify all peers that the security number changed. (That indeed has it's own ux-issues, but that is true or worse for all other messengers aswell)
When i think about this, making the pin permanent would 1/n

2025-06-04 19:56:26 UTC

- reply

Signal has a primary device that the others are only getting linked to. If you reinstall, then the main identity is gone, and relinking will delete them. That is kinda expected.
I also think your conception of what signal is trying to be isn't quite complete. Telegram&Discord are social media apps disguised as messengers, signal is a messenger only. that's why its (sometimes too) basic.
SMS(probably rcs too) and Whatsapp are horrible in terms of privacy, and absolutely no comparison

2025-06-04 19:42:59 UTC

- reply

Signal isn't susceptible against sim swaps. You can add a registration lock that requires a pin that prevents that kind of takeover.
You also should only loose your chats if you re-install the app and don't restore a backup, were they just gone? That's probably something you might want to open an issue with signal directly.

2025-06-03 17:13:36 UTC

- reply

Thanks, see my other comment. I have overlooked the 'ads' section in the settings which enables/disables adblocking. I wonder if it deserves a more prominent link to it...
Have you had issues with multi-stage logins?

2025-06-03 17:08:18 UTC

- reply

Oh, you're right! I was looking through the settings and i must have overlooked the 'Ads'-section. That's great! From github issues it looked like it was still experimental.
And i have figured out why the password prompt seemingly does not work. I have been using two-stage logins (ebay/amazon) where it only shows up for the password. Single stage ones seem to work fine. Is this expected, or depends on which password manager i am using?
Sorry for the confusion, and many thanks!

2025-06-03 16:49:19 UTC

- reply

There are two things i regularly run into when trying to use vanadium:
1. No adblocking/contentblocking (for usability-reasons, not privacy)
2. Missing support for "external" password managers via the autofill service
From what i have read, 1 is a future feature (that i probably can also work around with an adblocking vpn app), and two *should* work. But i am not getting the prompts. Do i need to configure anything special for that?

2025-05-22 16:03:49 UTC

- reply

How much of an improvement are we speaking of? Most of the time signal is using a lot less energy in comparison to most other apps i am using.