4 ms·
I suppose that the BBC article title could be considered to be correct in a narrow sense. Cellebrite makes products that can, in some cases, unlock phones. Sign
by upofadown 6y ago
I suppose that the BBC article title could be considered to be correct in a narrow sense. Cellebrite makes products that can, in some cases, unlock phones. Signal Messenger depends on the phone OS to protect the key used to encrypt the saved data. So in some cases Cellebrite does have the power to break the saved data encryption.
The Signal case is interesting because the app used to have a feature where you could protect the data with a separate strong passphrase. That would of prevented this particular attack. For reasons that are not clear to me, Signal eliminated this feature.
- tw25520481 6y ago> So in some cases Cellebrite does have the power to break the saved data encryption. IIUC, in those cases they could instead just open the Signal app.
- upofadown 6y agoBut you would never want to do something like that if you were looking for evidence you might want to present at a trial.
- Brian_K_White 6y agoSo what? That's a procedural rule not the difference between "cracking encryption" and not. It still means all they did was automate something, not crack something.
- polar 6y agoOpening up the database reveals more metadata than would be visible in the application's user interface.