GitHub - mollyim/mollyim-android: A fork of Signal for Android with passphrase lock.
Molly is a hardened version of Signal for Android, the fast simple yet secure messaging app by Signal Foundation.
^ Molly has unique features compared to Signal:
Protects database with passphrase encryption
Locks down the app automatically after you go a certain time without unlocking your device
Securely shreds sensitive data from RAM
Allows you to delete contacts and stop sharing your profile
Clears call notifications together with expiring messages
Disables debug logs
^^
Besides that, you will find all the features of Signal plus some minor tweaks and improvements. The only exception is the SMS integration, that is incompatible with Molly security enhancements.
@voltronic It won't respect the incognito tag in Signal, and they *won't* tell you to use an open-source keyboard to mitigate this.
Naomi Wu @sexycyborg (and @hacks4pancakes pretty sure and other "name" infosecers) have been drawing attention to this for a while now.
Your devices OS is made by Google... your virt.keyboard is prob from some big tech corp like Samsung or Sony, or Google, or Apple.
Real security is rarely turnkey.
@code @voltronic @hacks4pancakes
So what do you have to do to make incognito work?
Ohhh wait the keyboards on touchscreen phones are separate programs in and of themselves?
So you have to use open-source, privacy-respecting, security-mindful keyboard programs to replace the default OS one?
@GlytchMeister
Pretty much. Two popular ones are AnySoftKeyboard and OpenBoard.
None of the open-source Android keyboards have ever worked that well for me, though.
@code
Good point, but that's an issue in Signal itself; not just this fork.
@voltronic weeeeellll.... its more an issue with the people who make Signal, not the app itself necessarily...
@code
Would anyone really fully trust a person with a name like that, anyway?
@voltronic What. Moxxie? /shrug Whats in a name these days lol
@voltronic
Looks very good..
But who in their right mind would want SMS integration?
Glad it can’t do this.