logoalt Hacker News

IshKebabtoday at 8:41 PM2 repliesview on HN

https://github.com/mollyim/mollyim-android/blob/285650e38613...

I'm pretty unconvinced that this is a sane or useful thing to do.


Replies

saghmtoday at 8:57 PM

Is there a specific part you're referring to? For those of us who don't read or write Java frequently, it's not clear whether it's worth it to spend time reading the code without at least having some sense of whether you might be making a compelling point or not.

wakawaka28today at 9:07 PM

You need to be more specific. Lots of security-conscious apps wipe their memory. Memory contains, among other things, the decrypted text and private keys for the app. RAM is known to hold data longer than you'd want, and it can be swapped out onto persistent storage like the internal SSD. If you don't know that wiping memory is a basic and common feature for apps like this, then you're not qualified to have an opinion. Now if you think wiping the memory is ineffective, inefficient, or superceded by a bigger issue, then we might have something to talk about.