johanw666 / Signal-Android

Fork from a private messenger for Android with extra options added: full backup and (partial, ony text) xml backup of messages. Restore can happen at any time, not only after a fresh install. Import SMS database. Import of (unencrypted) WhatsApp databases. Removed apk expire. Choose between passphrase protection and the Android screenlock. Choice for the backup location (internal or removable storage on Android < 11 (on 11 and higher this is already possible)). Set the maptype in the place picker. Option to treat view-once media as normal media. Option to ignore remote deletion. Choose between FCM or websocket notification delivery.
https://johanw.home.xs4all.nl/Signal/signal-jw.html
GNU Affero General Public License v3.0
250 stars 16 forks source link

Allow Native Android Backup #11

Closed mentalisttraceur closed 3 years ago

mentalisttraceur commented 3 years ago

Can you please delete the line that disables Android backups, or change it to true?

This would allow people to use adb backup to get the entire app data.

Of course, the caveat is that if you enable this, the app data becomes eligible for Google Cloud backups, with whatever potential security risks of leaking private Signal data to/through Google servers that entails.

johanw666 commented 3 years ago

A backup made this way would be useless (except on Android 4 and 5 devices). On Android 6 and above, the Signal database is encrypted with a key stored in the Android keystore that can not be copied this way, so after restore Signal would crash on an unreadable database.

The custom "Encrypted backup" option from the main menu stores these files, AND a copy of the required keys that allow it to restore them on another device.

mentalisttraceur commented 3 years ago

Oh, that's good to know! Thanks!