Kremlin targeting app at heart of White House group chat leaks
-
I wonder how much data a single bird could feasibly carry. Quite a bit more than when this standard was first thought up I'm sure. You can get some incredibly high capacity sd cards now.African or European swallow?
-
Even if they do get access to the chat logs, good luck brute forcing those encryption keys Putin!
Wasn’t there a hacker group some years ago that released Signal binaries with backdoors that allowed attackers to read decrypted messages?
-
It's not a surprise Russia and friends are attacking the platform; it's surprising the Whitehouse is using it for official communications. (or at least it would be, if the WH wasn't occupied by nazi tech bros...)
It's a pretty good endorsement of the app!
-
Even if they do get access to the chat logs, good luck brute forcing those encryption keys Putin!
-
It's not a surprise Russia and friends are attacking the platform; it's surprising the Whitehouse is using it for official communications. (or at least it would be, if the WH wasn't occupied by nazi tech bros...)
Additionally, they're likely using it on their personal, insecure phones, on insecure networks.
There's whole layers of security being bypassed here.
-
Even if they do get access to the chat logs, good luck brute forcing those encryption keys Putin!
I can think of easier ways of compromising the data besides brute forcing the keys, off the top of my head, and I'm just some schmuck.
-
Compromise their endpoint with a malicious app on the app store.
-
Gain physical access to the device and compromise it. Use your imagination – pickpocket, traffic stop or customs inspection by a compromised agent, seduce them with a honeypot, etc.
-
Socially engineer them to mistakingly add you to their group chats.
-
SIM swap
Signal might be fine for journalists, criminals, cheating spouses, and general privacy when used properly with good OpSec but nation state adversaries have significantly greater resources than your average attacker, and thus require more significant security.
-
-
This post did not contain any content.
As of March 2023, Pegasus operators were able to remotely install the spyware on iOS versions through 16.0.3 using a zero-click exploit. While the capabilities of Pegasus may vary over time due to software updates, Pegasus is generally capable of reading text messages, call snooping, collecting passwords, location tracking, accessing the target device's microphone and camera, and harvesting information from apps.
This is consumer grade spyware built by Israeli intelligence and loaned out to just about everyone. Governments use this to hunt down activists and opposition party members.
This Signal leak is one hole in the colander. Sure, water will leak through that hole. But water will also leak through all the other holes. And the countries collecting that water have more than what NSO Group contracts out.
-
It's a pretty good endorsement of the app!
Honestly, yeah. IIRC, the Swedish military also advised using it.
-
Pretty much every time there have been head to head competitions between birds and wires, the birds have won.
Yeah, it's not the bandwidth that's the problem, it's the ping.
-
I wonder how much data a single bird could feasibly carry. Quite a bit more than when this standard was first thought up I'm sure. You can get some incredibly high capacity sd cards now.
I wonder how much data a single bird could feasibly carry
Considering 1TB SD cards exist, I imagine it's quite a lot.
-
Pretty much every time there have been head to head competitions between birds and wires, the birds have won.
The birds stand on the wires to mock their inferior bandwidth
-
This post did not contain any content.
These boomers think Signal is safe because they use the word encrypted.
Can we please vote these clowns out and get some adults back in government?
-
These boomers think Signal is safe because they use the word encrypted.
Can we please vote these clowns out and get some adults back in government?
Signal is pretty safe. They exploited a specific phishing vector and forged group chat invite links that also send conversation data to their own linked devices.
AFAICT this was a phishing attack, not an attack on Signal.
Disclaimer: I'm not endorsing the use of Signal for government information, which is supposed to be kept for the record.
-
Yeah, it's not the bandwidth that's the problem, it's the ping.
I'd assume range too. Hard to go across the ocean by pigeon.
-
Yes that todays big storyline
Many comments, one post mad about jordanlund. What do you think happened today that's more important? Clearly you must not think it's important if you didn't post anything about it.
-
I wonder how much data a single bird could feasibly carry. Quite a bit more than when this standard was first thought up I'm sure. You can get some incredibly high capacity sd cards now.
Its not a question of where it could grasp the data, it's a question of weight ratios
-
System shared this topic on
