GitHub - mollyim/mollyim-android: A fork of Signal for Android with passphrase lock.
Molly is a hardened version of Signal for Android, the fast simple yet secure messaging app by Signal Foundation.
^ Molly has unique features compared to Signal:
Protects database with passphrase encryption
Locks down the app automatically after you go a certain time without unlocking your device
Securely shreds sensitive data from RAM
Allows you to delete contacts and stop sharing your profile
Clears call notifications together with expiring messages
Disables debug logs
^^
Besides that, you will find all the features of Signal plus some minor tweaks and improvements. The only exception is the SMS integration, that is incompatible with Molly security enhancements.
@voltronic It won't respect the incognito tag in Signal, and they *won't* tell you to use an open-source keyboard to mitigate this.
Naomi Wu @sexycyborg (and @hacks4pancakes pretty sure and other "name" infosecers) have been drawing attention to this for a while now.
Your devices OS is made by Google... your virt.keyboard is prob from some big tech corp like Samsung or Sony, or Google, or Apple.
Real security is rarely turnkey.
@code @voltronic @hacks4pancakes
So what do you have to do to make incognito work?
Ohhh wait the keyboards on touchscreen phones are separate programs in and of themselves?
So you have to use open-source, privacy-respecting, security-mindful keyboard programs to replace the default OS one?
@GlytchMeister
Pretty much. Two popular ones are AnySoftKeyboard and OpenBoard.
None of the open-source Android keyboards have ever worked that well for me, though.