Featue Request: Quick way to wipe message database

[HadManySons]

Say for some reason you're being coerced with force to disclose your password, could you make a quick way (say a button combo + confirm dialogue) to wipe the text message database?

[frioux]

++

[DaveQB]

You can with 4 button presses now. This is not what you meant?

[HadManySons]

4 presses of what button? Was this information contained in the wiki somewhere?

[DaveQB]

@HadManySons I had to find this yesterday. Press and hold a conversation. In this select miss you can press the select all button in the bottom right hand corner. Then press the trash can button (bottom left)

[HadManySons]

Oh, well yeah. I'm saying without inputting your password. Some sort of button combo you can set to wipe everything. Like how you can set a pattern unlock on the android lock screen, some sort of button combo to wipe the database without putting a password.

[frioux]

Well better would be a custom wipe password so random strangers who have
used TextSecure can't execute the wipe
On Jul 9, 2013 6:00 PM, "HadManySons" notifications@github.com wrote:

Oh, well yeah. I'm saying without inputting your password. Some sort of
button combo you can set to wipe everything. Like how you can set a pattern
unlock on the android lock screen, some sort of button combo to wipe the
database without putting a password.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/175#issuecomment-20711514
.

[HadManySons]

Or that, make it look like you're putting in your password and without behaving any differently, the app wipes the database

[joeykrim]

Added the four steps shared by @DaveQB to the Wiki: https://github.com/WhisperSystems/TextSecure/wiki/Using-TextSecure

Overall, I think this is a very interesting idea. What do you think of my rendition below?

If the database wipe was actioned on the same passphrase entry screen as is used to unlock the database, the user would probably need two passphrases:
First passphrase to decrypt and use the database. This is a standard feature that already exists.
Second (and different from the first) passphrase to immediately wipe the database which could then also create a new blank database and drop the user at the standard conversation list screen. The end result would appear as if the user had no text messages. This could be the new feature added to accomplish the goal raised in this issue.

[DaveQB]

Sounds like a brilliant idea.

[HadManySons]

@joeykrim I'd say that your idea is the best way so far to execute the idea. Gives the user a plausible deniability "see, I told you it was empty/blank"

[stefanb]

Totally empty message lists can raise suspicion, specially when crossing borders, when operators normally bomb you with messages (emergency numbers, their price list...). Why not just hide (or even wipe) encrypted messages and show un-encrypted ones.

[generalmanager]

I'd support the solution @joeykrim proposed, but in the scenario @stefanb described, either leaving the unencrypted messages would be nice - maybe with the possibility to have a modifiable list of fake messages that will be imported to the database after the wipe - that'd be the TSA/Syria/Ukraine version.

[jeremymasters]

Following with great interest.

[HadManySons]

Yeah, some sort pre-defined fake messages left behind after the "wipe" password was entered