How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
Technology
31
Beiträge
18
Kommentatoren
4
Aufrufe
-
I'm still not confused and you're still missing the forest for the trees because you don't like the common practice of including the server infrastructure when talking about apps.
There was a plaintext archive of messages on a remote server. That's a security problem no matter what point you're trying to make about the term app.
I do like common terminology, that's the problem.
Once again, this has already been cleared up elsewhere. Since you seem intent on dragging this out for some reason, you're going to be blocked. Have a nice night.
-
This post did not contain any content.
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
WIRED (www.wired.com)
They sound staggeringly incompetent. And anyone who bought their software without any investigation into its quality also sounds staggeringly incompetent. Apparently there's a lot of it going around.
-
Molly encrypts it using a passphrase instead of a locally stored key for exactly that reason.
The passphrase or the unencrypted database are still open in memory. Though that is, of course, a more complicated attack but they could simply read it through the app itself.
-
Maybe you should start reading up on stuff you don't know about before adding nonsense to internet threads.
This is now the third post in the last 24 hours where I stumble into a needlessly long thread because this user is completely obtuse and can't handle being wrong or a different opinion.
-
The passphrase or the unencrypted database are still open in memory. Though that is, of course, a more complicated attack but they could simply read it through the app itself.
You can set it to wipe them from memory on different conditions, including instantly if youre that paranoid, sure its still possible. Its an optional feature most people wont use, but its pretty well thought out.
-
They sound staggeringly incompetent. And anyone who bought their software without any investigation into its quality also sounds staggeringly incompetent. Apparently there's a lot of it going around.
In the 1980s the trend of the day was patriotism.
In the 1990s the trend of the day was being a rebel.
In the 2000s, there started to become a divide on what the trend ofthe day was. You were either pro patriotism/pro war.....or, you were anti war/pro protesting. At least in the USA.
2010s the trend of the day was culture wars and division.
2020s, the trend of the day seems to be batshit lunacy and mindnumbing stupidity.
It's 2025. We have 5 more years to go. And with trump having 4 more of those years, I expect no change there.
God I hope the 2030s bring some kind of sanity, unity, and enlightenment.
Or, barring that, I'd also settle for UFOs visiting earth and allowing humans to leave earth. I mean seriously. How bad could other planets be, right? I mean their species is clearly more advanced then ours. I figure humans had their shot. Now I'll roll the dice and give these grey guys a shot, right? What could POSSIBLY go wrong?
And hey, if they're the anal probe kind of aliens, that's just a bonus.....uhhhh......I mean......what? No no, I didn't say that. I'm just some random straight dude looking to leave this planet with some grey dudes I just met.
-
Don't know what you mean. I didn't add any "nonsense". Just a direct quote from the article in question.
Totally /s Can't even read your own comments.
-
Here's a link to the original article (from the same author) on the platform you should actually subscribe to.
The Signal Clone the Trump Admin Uses Was Hacked
TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.
404 Media (www.404media.co)
Big 404 fan, but "original" is misleading. "First article on this topic" is more accurate. OPs link is arguably more interesting.
-
Here's a link to the original article (from the same author) on the platform you should actually subscribe to.
The Signal Clone the Trump Admin Uses Was Hacked
TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.
404 Media (www.404media.co)
404 has a partnership with Wired. They are both great publications; I subscribe to both. So reading this work on Wired supports 404
404 Media Is Partnering With Wired
Wired is going to co-publish two of our articles a month.
404 Media (www.404media.co)
-
Big 404 fan, but "original" is misleading. "First article on this topic" is more accurate. OPs link is arguably more interesting.
You might enjoy the full blog post from the author:
Despite misleading marketing, Israeli company TeleMessage, used by Trump officials, can access plaintext chat logs
💡Update May 18, 2025: I described TeleMessage's trivial vulnerability in an article for WIRED: How the knock-off Signal app used by Trump officials got hacked in 20 minutes Update May 19, 2025: Uh oh: DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server Update May 21, 2025:
micahflee (micahflee.com)
-
This post did not contain any content.
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
WIRED (www.wired.com)
Not to mention TeleMessage violated the terms of the GPL. Signal is under gpl and I can't find TeleMessage's code anywhere.
Edit: it appears it is online somewhere just not in a github repo or anything
Here's the source code for the unofficial Signal app used by Trump officials
💡Update May 4, 2025: I have published quite the follow-up story, if I may say so myself: The Signal Clone the Trump Admin Uses Was Hacked Update May 6, 2025: I've written a new detailed analysis. The findings are based on the TM SGNL source code and are corroborated by
micahflee (micahflee.com)
