Technical analysis of the Signal clone used by Trump officials

Post by protocolture » Mon, May 05, 2025, 8:57 AM UTC

namdnay wrote: post #113

abhisek wrote: post #72

Still trying to grasp the idea of archiving messages from E2E encrypted communication system into a storage that entirely breaks the purpose of using something like Signal. It’s like encashing on the trust of Signal protocol, app while breaking its security model so that someone else can search through all messages. What am I missing here?

> What am I missing here? OK, say you're a bank. The SEC states you need to keep archives of every discussion your traders have with anyone at any time (I'm simplifying things but you get the point). You keep getting massive fines because traders were whatsapping about deals So now you've got several options - you can use MS Teams, which of course offers archival, compliance monitoring etc. But that means trusting MS…

Post by protocolture » Mon, May 05, 2025, 8:59 AM UTC

donnachangstein wrote: post #13

ComputerGuru wrote: post #10

White House communications director previously revealed (after “Signalgate”) that Signal was an approved and whitelisted app for gov’t officials to have on work phones and even discuss top-secret matters on. But I haven’t heard that TeleMessage was approved (and I’d have serious questions if it were given the foreign intelligence factor). Anyone know if there is a clear answer to whether it’s been approved?

The correct answer is no one outside US Government IT knows for sure what is or isn't approved per their own rules. Every article (and comments therein) are just speculation and people trying to confirm their own biases, desperately looking for something to blame someone for, to produce more rage-bait and thus feed more ad clicks. Every single article is written with the presumption that there are no actual IT people…

Post by timschmidt » Mon, May 05, 2025, 9:03 AM UTC

_djo_ wrote: post #118

timschmidt wrote: post #114

Earlier quoted context omitted.

Your reference [0] appears to contradict what you've said here. It speaks at length about several NSA approved options as alternatives, but says Obama used a BlackBerry. The photo attached to the article captioned "President-elect Barack Obama checks his BlackBerry while riding on his campaign bus in Pennsylvania last March." appears to show a blackberry. I take it from the article that this was as controversial as I…

He was allowed to keep his BlackBerry for personal communication only, not classified communication, and had to use a Sectéra Edge for classified communication. [0] The Blackberry for personal use wasn't a stock BlackBerry, but hardened by the NSA and fitted with the SecurVoice software package to encrypt voice calls, emails, and messages. The few people he had on his approved communication list were given the same d…

Post by _djo_ » Mon, May 05, 2025, 9:11 AM UTC

timschmidt wrote: post #125

_djo_ wrote: post #118

Earlier quoted context omitted.

He was allowed to keep his BlackBerry for personal communication only, not classified communication, and had to use a Sectéra Edge for classified communication. [0] The Blackberry for personal use wasn't a stock BlackBerry, but hardened by the NSA and fitted with the SecurVoice software package to encrypt voice calls, emails, and messages. The few people he had on his approved communication list were given the same d…

> He was allowed to keep his BlackBerry for personal communication only, not classified communication Presence of the senior staff on his (very limited) contact list would seem to contradict that statement. Communication with them would be, by definition, not personal. I agree with you that our government officials should be using the secure infrastructure our patriotic service members and civil servants work so hard…

Post by namdnay » Mon, May 05, 2025, 9:20 AM UTC

be_erik wrote: post #67

watusername wrote: post #45

Earlier quoted context omitted.

According to the new 404 Media article [0] about the app's archive server actually being hacked, TeleMessage does have contracts with several governmental agencies. Still not a direct answer to the question, I know, but it tilts the answer overwhelmingly towards "yes." [0]: https://www.404media.co/the-signal-clone-the-trump-admin-use...

This is so frightening. I worked in corporate security, and that was occasionally a leaking ship, but this wouldn’t even fly with our engineers even if we wanted their message history. This is negligence.