4 ms·
This immediately smells of marketing bullshit: > Decrypting messages and attachments sent with Signal has been all but impossible…until now. > We found that a
by gizzlon 6y ago
This immediately smells of marketing bullshit:
> Decrypting messages and attachments sent with Signal has been all but impossible…until now.
> We found that acquiring the key requires reading a value from the shared preferences file and decrypting it using a key called “AndroidSecretKey”, which is saved by an android feature called “Keystore”.
Yeah, if you have all the keys you can decrypt stuff..
This is dumb, pleas please do not upvote
- polar 6y ago> Yeah, if you have all the keys you can decrypt stuff.. I expect the intended audience for this article is digital forensics examiners, who might be employed by say law enforcement or corporate investigators. Not the average Hacker News crowd.
- dmix 6y agoSignal has considered this by adding an additional client-side "encrypted my messages" locally. So I'm curious if this is what they are referring to. Post-physical unlocked HD access to the device, aka digital forensics.
- deleted 6y ago[deleted]
- Justsignedup 6y agoSo is the goal here to basically root the android / iphone, then grab the encryption key, then grab the decrypted signal app data, then grab the encryption key? I mean makes sense as a tool if they can automate that well.