3 ms·
Duh? They're just reading messages from the local device. This isn't news. This isn't a remote attack, nor an attack on the protocol, nor anything like that. T
by marcan_42 6y ago
Duh? They're just reading messages from the local device. This isn't news. This isn't a remote attack, nor an attack on the protocol, nor anything like that.
This is pure marketing BS. "Decrypting Signal messages and attachments was not an easy task. It required extensive research on many different fronts to create new capabilities from scratch." is marketing speak for "we read some open source code and reimplemented it, and we want it to sound hard and difficult so you will pay us more money."
Cellebrite's stuff is based on 0-day vulnerabilities in phone OSes and hardware in order to extract the data. Once you have the data, the rest of it is parsing and formatting fluff to package up the data in an easily digestible form for law enforcement to use. This is about the latter. There is no vulnerability in Signal being cracked here. It's just doing the same thing Signal does to show you your own messages.