How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
-
This post did not contain any content.
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
WIRED (www.wired.com)
-
This post did not contain any content.
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
WIRED (www.wired.com)
Here's a link to the original article (from the same author) on the platform you should actually subscribe to.
The Signal Clone the Trump Admin Uses Was Hacked
TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.
404 Media (www.404media.co)
-
This post did not contain any content.
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
WIRED (www.wired.com)
works in almost exactly the same way as Signal, except that it also archives copies of all the messages passing through it, shattering all of its security guarantees.
Pretty sure Signal does that as well, which is not a security issue.
-
works in almost exactly the same way as Signal, except that it also archives copies of all the messages passing through it, shattering all of its security guarantees.
Pretty sure Signal does that as well, which is not a security issue.
Signal uses end-to-end encryption (E2EE). The only copies of messages are on the sender’s and recipient’s devices.
-
Signal uses end-to-end encryption (E2EE). The only copies of messages are on the sender’s and recipient’s devices.
Copies of messages are also known as archives.
-
Copies of messages are also known as archives.
Signal does not archive messages on server side
-
Signal does not archive messages on server side
They weren't talking about the server:
This app...works in almost exactly the same way as Signal, except that it also archives copies of all the messages passing through it, shattering all of its security guarantees.
-
They weren't talking about the server:
This app...works in almost exactly the same way as Signal, except that it also archives copies of all the messages passing through it, shattering all of its security guarantees.
It's why Molly has local database encryption.
-
They weren't talking about the server:
This app...works in almost exactly the same way as Signal, except that it also archives copies of all the messages passing through it, shattering all of its security guarantees.
Later in the article, it talks specifically about the server-side archives being stored in plain text. That’s why the hacker was able to access messages. This isn’t about the local copies on phones.
-
It's why Molly has local database encryption.
That doesn't really do anything. Attackers need local access to the device to get the database itself. Chances are, they'll get the key right with it.
-
That doesn't really do anything. Attackers need local access to the device to get the database itself. Chances are, they'll get the key right with it.
Molly encrypts it using a passphrase instead of a locally stored key for exactly that reason.
-
Later in the article, it talks specifically about the server-side archives being stored in plain text. That’s why the hacker was able to access messages. This isn’t about the local copies on phones.
Yeah I didn't read past the misinformation
-
Yeah I didn't read past the misinformation
Kinda seems like you're the misinformation.
-
Yeah I didn't read past the misinformation
Maybe you should start reading up on stuff you don't know about before adding nonsense to internet threads.
-
Kinda seems like you're the misinformation.
You're confused, I am not the author of this article. I did not write the statement above, just copied and pasted it here.
-
Maybe you should start reading up on stuff you don't know about before adding nonsense to internet threads.
Don't know what you mean. I didn't add any "nonsense". Just a direct quote from the article in question.
-
This post did not contain any content.
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
WIRED (www.wired.com)
-
You're confused, I am not the author of this article. I did not write the statement above, just copied and pasted it here.
I'm not confused, you're intentionally misreading what's happening for some reason.
"Passing through it" pretty clearly refers to the server as that's what was hacked into and had plain text archives.
You're hyper fixating on the fact that the article says "the app" when referring to both the phone and server pieces to try and argue... something.
-
I'm not confused, you're intentionally misreading what's happening for some reason.
"Passing through it" pretty clearly refers to the server as that's what was hacked into and had plain text archives.
You're hyper fixating on the fact that the article says "the app" when referring to both the phone and server pieces to try and argue... something.
You are confused. I'm not "intentionally misreading" anything, it was written incorrectly. I'm not trying to argue anything. I'm just reading the (wrong) words used in the article. When I come across a piece of misinformation, I don't continue reading in the hopes that they clear it up later, I write it off and close it.
Someone else cleared this up. There's no reason to continue arguing about it.
-
You are confused. I'm not "intentionally misreading" anything, it was written incorrectly. I'm not trying to argue anything. I'm just reading the (wrong) words used in the article. When I come across a piece of misinformation, I don't continue reading in the hopes that they clear it up later, I write it off and close it.
Someone else cleared this up. There's no reason to continue arguing about it.
I'm still not confused and you're still missing the forest for the trees because you don't like the common practice of including the server infrastructure when talking about apps.
There was a plaintext archive of messages on a remote server. That's a security problem no matter what point you're trying to make about the term app.
-
An LAPD helicopter claimed to have ID'ed protesters from above and threatened to "come to your house"
Technology1
-
-
1
-
-
-
-
-
Gig Companies Violate Workers’ Rights: Amazon Flex, DoorDash, Favor, Instacart, Lyft, Shipt, and Uber claim to offer workers flexibility but end up paying them less than state or local minimum wages.
Technology1