3 ms·
Dumb question....but would they have been better off using Signal? Assuming a burner sim for registration.
by nujabe 6y ago
Dumb question....but would they have been better off using Signal? Assuming a burner sim for registration.
- jrexilius 6y agoyes, if they could keep shuffling physical phones and sims with high frequency. But that is _serious_ operational drag and discipline. Professionals can't generally manage that at scale. We're talking criminals here..
- nujabe 6y agoWhy would they have to change sims? IIRC Signal only requires a number for UX purposes, numbers are never stored on their servers.
- kybernetikos 6y agoSignal is installed from the platform stores, which have the ability to push updates. As far as we can tell, the compromise was done via a pushed update. It's likely that Signal wouldn't have helped.
- cesarb 6y agoOn Android, I recall that updates to a package must be signed by the same key as the package being updated, otherwise the device itself will reject the update. Doesn't that mean that only the Signal developers (who are the ones who signed the original package) would be able to create a compromised update?
- kybernetikos 6y agoThat is likely what happened in this situation (although I don't have details).