4 ms·
This was such a weird news story to read. At least they used Signal? That's gotta be a plus at some level. Unrelated, but I wonder how the gray hat market for
by dbl000 2y ago
This was such a weird news story to read. At least they used Signal? That's gotta be a plus at some level.
Unrelated, but I wonder how the gray hat market for Signal vulns is doing now?
- tptacek 2y agoIt's unlikely that there is one.
- stefan_ 2y agoThe basic Signal vulnerability even if the protocol is perfectly sound is that they can push effectively silent automatic app updates to do whatever. Presumably they didn't want to signup for this but that's how app distribution works nowadays, and it's certainly not fit for classified information.
- ratg13 2y agoSignal is primarily for end-to-end encryption. If a device has been compromised, the database can be extracted with all messages and contacts
- alistairSH 2y agoHow is that a plus? Maybe vs plain old SMS... But, it's a flagrant leak of classified info. Using a medium explicitly prohibited by policy. And likely now lost to time (Signal messages can be configured to auto-delete on a timer), when all of this sort of correspondence is legally required to be retained.
- yks 2y ago> How is that a plus? They could've used Telegram /s. It's popular with the crypto crowd after all.
- rasz 2y agoThey probably do also use Telegram https://www.forbes.com/sites/daveywinder/2025/03/22/russian-broker-offers-4-million-for-telegram-zero-day-app-attack/ https://www.forbes.com/sites/daveywinder/2025/03/22/russian-...
- ttyprintk 2y agoManafort used Telegram extensively. The only messages used against him in court were iCloud backups of WhatsApp.