Meh. Looks like they "found" how the app stores the key to its local database and they "figured out" how the file encryption is implemented. Surprisingly to no

Meh. Looks like they "found" how the app stores the key to its local database and they "figured out" how the file encryption is implemented. Surprisingly to no one: if you have fully access to the Phone (including access to the user's keystore) you can use the Signal app (and thus read messages). Thanks for making "our world a safer place".