Question about Signal
fedilink

My friend and I were discussing cell phone security and he said that if someone backdoored your phone that they could read all your signal messages. Is this true? I would think that the only way to view signal messages is to literally open up the app and view them.

@Lynda@lemmy.ml
link
fedilink
119 hilabete

If a device is compromised, the adversary can do whatever they want: screenshots, keyloggers, fork Signal and install their own client.

poVoq
link
fedilink
10
edit-2
9 hilabete

You are both sort of right. Signal’s on device storage is AFAIK only weakly encrypted with your screen-lock password (although you can enable a second weak password in Signal specifically). So if your phone is unlocked and backdoored the attacker can pretty much do what ever they want including reading your Signal messages.

Edit: to make it more clear… someone with a backdoor can just start a hidden application that does the same as the Signal client and open the on device stored messages with out your knowledge. And it is also quite trivial to install a keylogger to capture all passwords including those inside Signal.

@Nyaa@lemmy.ml
link
fedilink
69 hilabete

If your phone is compromised, anything that you can see they can see as well. Absolutely nothing can protect against that because the only way would be to prevent even yourself from seeing it.

Potentially a really good sandbox and strict permissions could help, but if someone were to backdoor your phone chances are they can get around most software based solutions anyway.

@molly@lemmy.ml
link
fedilink
-19 hilabete

Try molly – hardened fork of signal. With encrypted keys as soon as you lock it after using the app it shreds itself from ram.

You can use Molly a fork of signal

@Reaton@lemmy.ml
link
fedilink
109 hilabete

If the phone is backdoored, it would change nothing.

😂 u r just a h8r

The messages are encrypted on the phone

@pinknoise@lemmy.ml
link
fedilink
39 hilabete

But you can view the messages on your phone, so they are decrypted at some point. Then an attacker can steal the key and read them whenever they want. Or they just take screenshots when you use the app if they are lazy.

Molly has a feature, which prevents screenshots. Also everywhere you are in danger of password stealing, bruteforce attacks, etc.

@pinknoise@lemmy.ml
link
fedilink
19 hilabete

Molly has a feature, which prevents screenshots.

Again, if you can see it on the screen it’s possible to steal it. (How easy it is depends on the driver)

Molly (or any app) won’t help you if your phone is compromised, unless you set a pin to lock your messages and never unlock it after being compromised. (which is unlikely)

@Reaton@lemmy.ml
link
fedilink
39 hilabete

They only try to promote their app.

Adult_InThe_Room
banned
link
fedilink
1
edit-2
6 hilabete

removed by mod

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

  • 0 users online
  • 3 users / day
  • 15 users / week
  • 57 users / month
  • 377 users / 6 months
  • 14 subscribers
  • 1.76K Posts
  • 8.41K Comments
  • Modlog