4 ms·

I have a vaguely related question about Signal. People say it’s secure and encrypted but it was widely publicised that Sam Bankman Fried’s Signal messages were

I have a vaguely related question about Signal. People say it’s secure and encrypted but it was widely publicised that Sam Bankman Fried’s Signal messages were inspected by authorities. How did this happen?

ben_w 3y ago
While I can't prove this, my expectation in this case is: The authorities asked for them and, possibly after consulting a lawyer, he handed them over.
from 3y ago
There were cooperators in the same chatroom, a participant in the chats gave up their phone at an airport, or he volunteered it (probably not this). Same way it was obtained in all these cases: https://www.courtlistener.com/?q=%22signal%22+AND+%22encrypted%22&type=r&order_by=score+desc&case_name=united+states&description=complaint&page=1 https://www.courtlistener.com/?q=%22signal%22+AND+%22encrypt...
c420 3y ago
Interception occurs prior to encryption
- scrum-treats 3y ago
  How? Is it exploitation of hardware vulnerabilities (e.g., processor vulnerabilities), software vulnerabilities (e.g., apple's webkit vulnerabilities, google chrome + search JS vulnerabilities), or Wifi/Bluetooth vulnerabilities? The only way I can think to intercept prior to encryption would be Key logger, so this would require an already compromised device. Alternatively the government could force a vulnerability state (e.g., the Perseus text message of doom). Is this also your understanding?
dmbche 3y ago
Signal protects your messages while it's on the web, on the way to your recipient. During this time, it is encrypted - but while on your or the recipients device, its plain text (as you can read it). There are many ways to get to those messages, like getting access to your unlocked phone/unlocking your phone, if your signal is not password locked (and if they can't break that password), or doing this with your recipient. OpSec is a process, not single tools!

ben_w 3y ago

While I can't prove this, my expectation in this case is: The authorities asked for them and, possibly after consulting a lawyer, he handed them over.

from 3y ago

There were cooperators in the same chatroom, a participant in the chats gave up their phone at an airport, or he volunteered it (probably not this). Same way it was obtained in all these cases: https://www.courtlistener.com/?q=%22signal%22+AND+%22encrypted%22&type=r&order_by=score+desc&case_name=united+states&description=complaint&page=1 https://www.courtlistener.com/?q=%22signal%22+AND+%22encrypt...

c420 3y ago

Interception occurs prior to encryption

scrum-treats 3y ago
How? Is it exploitation of hardware vulnerabilities (e.g., processor vulnerabilities), software vulnerabilities (e.g., apple's webkit vulnerabilities, google chrome + search JS vulnerabilities), or Wifi/Bluetooth vulnerabilities? The only way I can think to intercept prior to encryption would be Key logger, so this would require an already compromised device. Alternatively the government could force a vulnerability state (e.g., the Perseus text message of doom). Is this also your understanding?

dmbche 3y ago

Signal protects your messages while it's on the web, on the way to your recipient. During this time, it is encrypted - but while on your or the recipients device, its plain text (as you can read it). There are many ways to get to those messages, like getting access to your unlocked phone/unlocking your phone, if your signal is not password locked (and if they can't break that password), or doing this with your recipient. OpSec is a process, not single tools!