Only affects unlocked devices at rest, though at that point they could just open the Signal app. What's more intruiging is how they might have managed to bypass

Only affects unlocked devices at rest, though at that point they could just open the Signal app. What's more intruiging is how they might have managed to bypass the security features in the Android Keystore[1] to obtain the decryption key. [1]https://developer.android.com/training/articles/keystore https://developer.android.com/training/articles/keystore