3 ms·

Rather than hacking Signal itself, maybe they were able to access the iOS app preview files from the iOS app-switcher? I'd imagine the app-switcher (the feature

by jb775 6y ago

Rather than hacking Signal itself, maybe they were able to access the iOS app preview files from the iOS app-switcher? I'd imagine the app-switcher (the feature when you swipe up to switch between recently used apps) works by overwriting a screenshot every time it's minimized. Maybe they were able to access this data directly or indirectly (or maybe even via iCloud). There's a setting in Signal where you can hide the screenshot in the app-switcher, but could still be triggered and stored somewhere. Or maybe they just got lucky and one of the guys had it disabled.

agret 6y ago
Should read the article before you comment next time ;) There is a screenshot in there showing it is directly parsing the Signal sqlite database. I am guessing on his device he had not set an access passcode to the Signal app so no key was required to decrypt the local message cache. Towards the end of the article the Signal creator hit the nail on the head saying this is a phone security issue and nothing to do with Signals security.