3 ms·
>I’m pretty sure that Google could serve a specially modified update or version of Signal to specific targets for surveillance, and they would be none the wiser
by bitmapbrother 10y ago
>I’m pretty sure that Google could serve a specially modified update or version of Signal to specific targets for surveillance, and they would be none the wiser that they installed malware on their phones.
I'm not sure he understands how app signing works and why it would be impossible for Google to forge a developer's signature. He also seems to have a problem with GCM and Google in general. Perhaps he should look into writing his own secure chat application.
- throwaway101416 10y agoWhy would they have to forge it? They can simply install a version that isn't signed on your system via an update. Then later replace it with a signed version once they have the data they wanted. You would never know what happened.