Comment on How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes

• tehsYs@discuss.tchncs.de ⁨4⁩ ⁨weeks⁩ ago

  Signal does not archive messages on server side

  source

  • Ulrich@feddit.org ⁨4⁩ ⁨weeks⁩ ago

    They weren’t talk about the server:

    This app…works in almost exactly the same way as Signal, except that it also archives copies of all the messages passing through it, shattering all of its security guarantees.

    source

    • ShittyBeatlesFCPres@lemmy.world ⁨4⁩ ⁨weeks⁩ ago

      Later in the article, it talks specifically about the server-side archives being stored in plain text. That’s why the hacker was able to access messages. This isn’t about the local copies on phones.

      source

      • Ulrich@feddit.org ⁨4⁩ ⁨weeks⁩ ago

        Yeah I didn’t read past the misinformation

        source

        • -> View More Comments
    • OmegaSunkey@ani.social ⁨4⁩ ⁨weeks⁩ ago

      It’s why Molly has local database encryption.

      source

      • 0xD@infosec.pub ⁨4⁩ ⁨weeks⁩ ago

        That doesn’t really do anything. Attackers need local access to the device to get the database itself. Chances are, they’ll get the key right with it.

        source

        • -> View More Comments
    • disguy_ovahea@lemmy.world ⁨4⁩ ⁨weeks⁩ ago

      The only backup option I see for Signal is through Android, but it’s optional. There is no backup support for iOS or desktop.

      …signal.org/…/360007059752-Backup-and-Restore-Mes…

      source