While this emerging operational interest has likely been sparked by wartime demands to gain access to sensitive government and military communications in the context of Russia's re-invasion of Ukraine, we anticipate the tactics and methods used to target Signal will grow in prevalence in the near-term and proliferate to additional threat actors and regions outside the Ukrainian theater of war,
Knowing who has spoken with whom at what time and for what duration is already very useful intelligence,
I will guarantee you 99.99% with confidence Russia and China are monitoring those two phones,
Screenshots or photos are not protected by Signal itself … and if previews are enabled by users in the app, sensitive info could appear on a locked screen,
I think we can assume that any government-issued phone to somebody at a Cabinet level would have all kinds of safeguards preinstalled,
They had to physically remove it from a classified system and then put it on an unclassified system,
What I will say, in order to illustrate the shocking recklessness of this Signal conversation, is that the
Signal is as secure as it gets for end to end encrypted messaging, but this leak was because they added an untrusted party to the chat,
Signal protects against outside snoops listening in on your private conversations,
It doesn’t protect against the risk of outsiders accessing the device where you’re using the app. If a phone has been hacked and has spyware implanted on it, then your messages and other files on the device could be getting read without your knowledge,
It's not a perfect technology, there is no perfect technology. The really good ones are very cumbersome, very hard to access,
High-level defense officials have SCIFs at home and secure comms 24/7. This wasn't some unavoidable slip – they deliberately shared war plans in an unsecured group chat. That's not a misunderstanding. It's gross negligence and total incompetence. Heads should roll,
We always want to use the best technology, this was the best technology for the moment, but again it wasn't classified so they probably viewed it as something that wasn't that important that obviously with the attack being - I don't know if it's been read out to you yet but that attack was a tremendous success for the U.S.,
Every time he opens his mouth, Donald Trump continues to demonstrate that he hasn't got a CLUE how government runs, how security works, or how America should be protected,
Team – establishing a principles group for coordination on Houthis, particularly for over the next 72 hours."
They named Signal as an app as an example of such an end-to-end encrypted messaging app,
Once we learned that Signal users were being targeted, and how they were being targeted, we introduced additional safeguards and in-app warnings to help protect people from falling victim to phishing attacks. This work was completed months ago,
A vulnerability has been identified in the Signal messenger application,
It’s just something that can happen. You can even prepare for it, and it can happen.”
I guess Signal is a few steps above leaving a copy of your war plan at the Chinese Embassy — but it’s far below the standards required for discussing any elements of a war plan,