Live data from Hacker News

Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

404media.co

131–137 of 137 posts

Re: Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

#131
post #128

Earlier quoted context omitted.

The point of E2E is only to make sure that Alice is talking to Bob and nobody else can pretend to be either of them or eavesdrop. There is no reason whatsoever to include where else the message may be sent, encrypted or not. Consider E2E protected email service. You send me the final designs over this encrypted channel. Then I put the designs onto a USB drive and give them to my printer to print. Then I hang them as…

>You are confusing Snapchat mechanics for encryption. I think we're talking about this from two different perspectives. You're considering a user in someone's conversation with a modified, archiving client. Yes, you obviously can't prevent that from a technical side, and it doesn't break Signal's E2E. It would be even simpler to do this with the unmodified Android Signal client, which essentially allows message expor…

Yeah I mean clients that auto-delete messages are a very useful tool in communicating between people. It’s that they aren’t really meant for anything actually sensitive because (regardless of if they have E2E or not) they can’t guarantee that someone isn’t archiving or exporting the messages. It is the wrong mechanic for anything sensitive.

If you want to make sure nothing is ever archived, there is no software-only solution. If you control the hardware, in theory you can mandate that everything from the OS level-up is a reproducible build and you know for a fact that the messaging client does not allow any export feature. But also, you still have the problem of someone taking a picture of the screen. The real way to do this would be to control the software, hardware, and environment, aka a SCIF. If you want me to see classified war plans, confiscate all my electronics then show me what I need to see in a controlled environment where I can’t make copies. Messaging apps just simply can’t do any of that.

Re: Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

#132

Earlier quoted context omitted.

"One of the things I was briefed on very early … was by the CIA records management folks about the use of Signal as a permissible work use," Ratcliffe said during a March 25 Senate Intelligence Committee hearing (see 45:05). "It is. That is a practice that preceded the current administration to the Biden administration." https://www.c-span.org/program/senate-committee/dni-director...

Exhaling air through flappy mouth and throat parts is also permissible in the CIA. That doesn’t mean you won’t get in trouble if you flap them in a way that says “we bomb x at y o’clock” where uncleared people can hear.

Sure, but that’s the point-Signal is permitted; it’s the content that matters, not the medium. Ratcliffe's testimony confirms it’s been standard practice across administrations. It’s already approved in IC circles despite your claims it harms national security.

Re: Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

#133
post #121

Earlier quoted context omitted.

Is there a term for any application which offers full control of your messages then, ie, I send you messages on Signal, but I can make them self destruct and you cannot screenshot them? (Pretty sure Signal allows this?). Nothing stopping a user from taking photos of the screen using another device, of course. Or running their own fork of Signal (which, when run from the open source for Android at least, runs on produ…

How can this exist?

While I'm sympathetic, the possibility of existence is not a prerequisite for having a name of it.

Re: Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

#134
post #90

Earlier quoted context omitted.

Maybe Signal needs to devote all their resources to develping the main app, which is their mission - secure communications for the general public.

They have ‘interesting’ priorities. MobileCoin is prioritised ahead of allowing an iPad-like secondary device experience on Android tablets, for example.

What makes you say that? I would guess they would do both if it was worthwhile. Android tablets and iPads have different capabilities under the hood - maybe the requirements aren't possible on Android tablets?

In any case, saying their priorities are misaligned because they don't scratch your particular itch is making a mountain of a molehill.

Re: Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

#135
post #134

Earlier quoted context omitted.

They have ‘interesting’ priorities. MobileCoin is prioritised ahead of allowing an iPad-like secondary device experience on Android tablets, for example.

What makes you say that? I would guess they would do both if it was worthwhile. Android tablets and iPads have different capabilities under the hood - maybe the requirements aren't possible on Android tablets? In any case, saying their priorities are misaligned because they don't scratch your particular itch is making a mountain of a molehill.

It has nothing to do with device capabilities or technical effort, and there are client forks which support it. Signal have simply made a conscious choice to disallow it.

https://community.signalusers.org/t/android-tablet-support/5...

Re: Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

#136
post #68
post #66

Earlier quoted context omitted.

Even though Israel is our "Ally" -- we really shouldn't trust a foreign company with our sensitive messaging. If you're in the government, you should treat Hegseth and anyone who uses Signal and TMSIGNL as compromised.

Please tell that to European governments too. The Netherlands military police was using Whatsapp (e.g., https://www.defensie.nl/actueel/nieuws/2022/06/15/maatregele... ). Only Germany has the BwMessenger (Matrix) as far as I know. It makes me wonder what the other militaries are using.

I thought DekkoSecure was a standard for encrypted govt/military messaging? Why bother with this COTS consumer crap?

Re: Mike Waltz Accidentally Reveals App Govt Uses to Archive Signal Messages

#137
post #134

Earlier quoted context omitted.

What makes you say that? I would guess they would do both if it was worthwhile. Android tablets and iPads have different capabilities under the hood - maybe the requirements aren't possible on Android tablets? In any case, saying their priorities are misaligned because they don't scratch your particular itch is making a mountain of a molehill.

It has nothing to do with device capabilities or technical effort, and there are client forks which support it. Signal have simply made a conscious choice to disallow it. https://community.signalusers.org/t/android-tablet-support/5...

The link seems unrelated to our discussion? What evidence do you have of Signal's decision and reasoning?
Post reply on HN