2 ms·
There's a strong possibility that Signal is already breaking Cellebrite https://signal.org/blog/cellebrite-vulnerabilities/ https://signal.org/blog/cellebrite-v
by abandonliberty 5y ago
There's a strong possibility that Signal is already breaking Cellebrite https://signal.org/blog/cellebrite-vulnerabilities/ https://signal.org/blog/cellebrite-vulnerabilities/
>For example, by including a specially formatted but otherwise innocuous file in an app on a device that is then scanned by Cellebrite, it’s possible to execute code that modifies not just the Cellebrite report being created in that scan, but also all previous and future generated Cellebrite reports from all previously scanned devices and all future scanned devices in any arbitrary way (inserting or removing text, email, photos, contacts, files, or any other data), with no detectable timestamp changes or checksum failures. This could even be done at random, and would seriously call the data integrity of Cellebrite’s reports into question.
...
>In completely unrelated news, upcoming versions of Signal will be periodically fetching files to place in app storage.
I strongly advise against pissing off Signal by claiming you can hack them.