OK, so now a foreign power has dirt on senior US officials as well as operational details about their plans. The first possibility leads to blackmail, the second to defeat, and both to scandal.
Technical analysis of the Signal clone used by Trump officials
271–280 of 387 posts
Re: Technical analysis of the Signal clone used by Trump officials
#272Earlier quoted context omitted.
What does conservative brain drain mean?
A few decades ago, the Republican party had one foot in the anti-intellectual camp, but only one. They were the party of young-earth creationists, religious pro-lifers, climate-deniers and gun-lovers - but also of educated fiscally conservative folks. The party would welcome economics professors and leaders of medium-sized businesses, promising no radical changes, no big increases in spending or regulation, and a gen…
Even more amazing considering that 90% doesn't pay any federal income taxes anyway.
Re: Technical analysis of the Signal clone used by Trump officials
#273Earlier quoted context omitted.
[flagged]
> Israel’s grip on DC’s balls is far too strong I more or less agree. > We’re literally an occupied nation The language of the US under occupation is a neonazi talking point, ZOG (Zionist Occupation Government) being a phrase neonazi morons like. Maybe a coincidence.
[deleted]
Re: Technical analysis of the Signal clone used by Trump officials
#274Is Signal allowing arbitrary apps to connect to its network? How do I know that my correspondent is using TM Sgnl or another unofficial app? Doesn't that break Signal's security guarantees? For example, what if I set my message to delete in 1 hour but TM Sgnl archives it, or some other app simply ignores the retention setting? If Signal allows it, it seems like a major vulnerability? I suppose I must trust other user…
There's no way for Signal to prevent any piece of code that can make a TCP connection and speak its protocol from using the service.
Re: Technical analysis of the Signal clone used by Trump officials
#275Earlier quoted context omitted.
That's an old article. According to Apple docs, Advanced Data Protection covers Device and Messages backups, which means they are E2EE.
Are there any stats as to the percentage of iPhone users that enable Advanced Data Protection? Defaults matter a lot, and I wouldn't be surprised if that number is (well) below 10%. If you are the only person out of all the people you correspond with who has ADP enabled, then everyone you correspond with is uploading the plaintext of your messages to Apple.
The number is well well below 1%. I would bet six figure sums it is below 0.1%.
Effectively nobody has it on. 99%+ of users aren’t even aware of the feature’s existence.
https://daringfireball.net/linked/2023/12/05/icloud-advanced...
You have to remember that there are something like a billion+ iOS users out there. 100 million people have not written down their 27 character alphanumeric account recovery key.
Re: Technical analysis of the Signal clone used by Trump officials
#276They took down the source code page: https://www.telemessage.com/developer/api-libraries/
Screenshot of previous version: https://0x0.st/8Jqf.png
Re: Technical analysis of the Signal clone used by Trump officials
#277Still trying to grasp the idea of archiving messages from E2E encrypted communication system into a storage that entirely breaks the purpose of using something like Signal. It’s like encashing on the trust of Signal protocol, app while breaking its security model so that someone else can search through all messages. What am I missing here?
> What am I missing here? OK, say you're a bank. The SEC states you need to keep archives of every discussion your traders have with anyone at any time (I'm simplifying things but you get the point). You keep getting massive fines because traders were whatsapping about deals So now you've got several options - you can use MS Teams, which of course offers archival, compliance monitoring etc. But that means trusting MS…
[deleted]
Re: Technical analysis of the Signal clone used by Trump officials
#278Earlier quoted context omitted.
Would be interesting to dump the app binaries so people can take a look at how its put together, I suspect its a minefield of sloppy injection functions into how signal works.
Signal is open source for the client, no one is doing work they don't have to cracking a binary you can just compile.
FYI, the server is also open source.
Re: Technical analysis of the Signal clone used by Trump officials
#279Is Signal allowing arbitrary apps to connect to its network? How do I know that my correspondent is using TM Sgnl or another unofficial app? Doesn't that break Signal's security guarantees? For example, what if I set my message to delete in 1 hour but TM Sgnl archives it, or some other app simply ignores the retention setting? If Signal allows it, it seems like a major vulnerability? I suppose I must trust other user…
There's no way for Signal to prevent any piece of code that can make a TCP connection and speak its protocol from using the service.
While that's true even in the general case (through reverse engineering), it's especially true in the case of Signal because it's open source.
There are libraries for interacting with Signal services (one from Signal themselves), here is a CLI tool that uses a patched official library: https://github.com/AsamK/signal-cli>
Re: Technical analysis of the Signal clone used by Trump officials
#280Earlier quoted context omitted.
[flagged]
> Israel’s grip on DC’s balls is far too strong I more or less agree. > We’re literally an occupied nation The language of the US under occupation is a neonazi talking point, ZOG (Zionist Occupation Government) being a phrase neonazi morons like. Maybe a coincidence.
[flagged]