A mistake in the process used by the Signal Desktop application to encrypt locally stored messages leaves them wide open to an attacker.