Meanwhile, people are accidentally leaking their phone numbers and their contacts' phone numbers because Signal replaced fingerprints that could safely be posted publicly with QR codes that can't, and didn't explain it: https://twitter.com/webster/status/793657469381713920
Shit, really? I hadn't published any QR codes, but I sure didn't realize that was part of the new system.
That's a pretty bad round of dropping the ball... Normally I respect that OWS explains security stuff in detail if you care, but also has a product that "just works" if you use defaults without much knowledge. This is pretty much the exact opposite of that, where they released a dangerous default with minimal explanation even for people who do read their stuff.
