Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Technical analysis of the Signal clone used by Trump officials

micahflee.com

Post reply on HN
Print view View original

91–100 of 387 posts

Re: Technical analysis of the Signal clone used by Trump officials

#91

Post by runlevel1 »

timschmidt wrote: post #89
seanhunter wrote: post #88

Earlier quoted context omitted.

Do you have evidence that Obama discussed or viewed topsecret intel on that blackberry or are you just trying to muddy the waters with a false equivalence?

You think he used it only to discuss what flavor of ice cream was being served that day in the whitehouse dining hall? With only the senior staff? If so, I have a bridge for sale which may interest you. > false equivalence We're literally talking about people occupying the same positions. If anything, blackberry seems less secure. For instance, there's a global en/decryption key, and it's known: https://www.vice.com/…

It was only to be used for a limited subset of Secret or lower comms. It was hardened and didn't use RIM's servers.

Re: Technical analysis of the Signal clone used by Trump officials

#93

Post by watwut »

jimmydoe wrote: post #30

We should all feel relieved that trump admin are following law to archive their chats after all. Unfortunately this Israeli company is just incompetent, should try something from Russia next time, given that’s all the data end up to be anyway.

I am pretty sure China has some backups too.

Re: Technical analysis of the Signal clone used by Trump officials

#94

Post by timschmidt »

runlevel1 wrote: post #91
timschmidt wrote: post #89

Earlier quoted context omitted.

You think he used it only to discuss what flavor of ice cream was being served that day in the whitehouse dining hall? With only the senior staff? If so, I have a bridge for sale which may interest you. > false equivalence We're literally talking about people occupying the same positions. If anything, blackberry seems less secure. For instance, there's a global en/decryption key, and it's known: https://www.vice.com/…

It was only to be used for a limited subset of Secret or lower comms. It was hardened and didn't use RIM's servers.

[flagged]

Re: Technical analysis of the Signal clone used by Trump officials

#95

Post by Klonoar »

userbinator wrote: post #75
duskwuff wrote: post #61

Earlier quoted context omitted.

> I would hope that any message archiving is being done on an organization-owned server though. There's compelling evidence that the messages all pass through TM servers before being archived. https://www.404media.co/the-signal-clone-the-trump-admin-use...

There's compelling evidence that the messages all pass through TM servers before being archived. The question is where the E2E encryption goes between.

The E2E encryption is likely not even relevant, unless I'm missing something?

The builds that are distributed would likely just send the plaintext un-encrypted message separately to the archive, and I'm guessing that means it goes right to TM servers before being dispatched elsewhere.

Re: Technical analysis of the Signal clone used by Trump officials

#96

Post by seanhunter »

timschmidt wrote: post #89
seanhunter wrote: post #88

Earlier quoted context omitted.

Do you have evidence that Obama discussed or viewed topsecret intel on that blackberry or are you just trying to muddy the waters with a false equivalence?

You think he used it only to discuss what flavor of ice cream was being served that day in the whitehouse dining hall? With only the senior staff? If so, I have a bridge for sale which may interest you. > false equivalence We're literally talking about people occupying the same positions. If anything, blackberry seems less secure. For instance, there's a global en/decryption key, and it's known: https://www.vice.com/…

OK so we've established two things:

1) you don't have any evidence that he used it for TS and are just trying to make a false equivalence.

2) you think secdef and potus occupy the same position.

Got it.

Re: Technical analysis of the Signal clone used by Trump officials

#97

Post by gavin-1 »

gopher_space wrote: post #76
donnachangstein wrote: post #13

Earlier quoted context omitted.

The correct answer is no one outside US Government IT knows for sure what is or isn't approved per their own rules. Every article (and comments therein) are just speculation and people trying to confirm their own biases, desperately looking for something to blame someone for, to produce more rage-bait and thus feed more ad clicks. Every single article is written with the presumption that there are no actual IT people…

[flagged]

What does conservative brain drain mean?

Re: Technical analysis of the Signal clone used by Trump officials

#98

Post by timschmidt »

seanhunter wrote: post #96
timschmidt wrote: post #89

Earlier quoted context omitted.

You think he used it only to discuss what flavor of ice cream was being served that day in the whitehouse dining hall? With only the senior staff? If so, I have a bridge for sale which may interest you. > false equivalence We're literally talking about people occupying the same positions. If anything, blackberry seems less secure. For instance, there's a global en/decryption key, and it's known: https://www.vice.com/…

OK so we've established two things: 1) you don't have any evidence that he used it for TS and are just trying to make a false equivalence. 2) you think secdef and potus occupy the same position. Got it.

[flagged]

Re: Technical analysis of the Signal clone used by Trump officials

#99

Post by Xylakant »

abhisek wrote: post #72

Still trying to grasp the idea of archiving messages from E2E encrypted communication system into a storage that entirely breaks the purpose of using something like Signal. It’s like encashing on the trust of Signal protocol, app while breaking its security model so that someone else can search through all messages. What am I missing here?

You can never control what I do on my device with the message received- I can make screenshots, or, if the app prevents that, take a picture of the screen.

The goal of signal is trusted end-to-end encrypted communication. Device/Message security on either end is not in scope for Signals threat model.

Re: Technical analysis of the Signal clone used by Trump officials

#100

Post by actionfromafar »

RIMR wrote: post #77
abhisek wrote: post #72

Still trying to grasp the idea of archiving messages from E2E encrypted communication system into a storage that entirely breaks the purpose of using something like Signal. It’s like encashing on the trust of Signal protocol, app while breaking its security model so that someone else can search through all messages. What am I missing here?

There are compliance reasons where you want the communications encrypted in flight, but need them retained at rest for compliance reasons. Federal record keeping laws would otherwise prohibit the use of a service like Signal. I'm honestly impressed that the people involved actually took the extra effort for compliance when nothing else they did was above board...

I would not assume the archives were meant for compliance and federal records.
Post reply on HN