Forbes put out an article on how Signal has some weaknesses using the after first unlock theory.
TL;DR – Yes, but not limited to signal. Power off your phone if you are worried.
Author: Security
Security – 259 – More WhatsApp Fallout
There was more news from the WhatsApp privacy fallout that we decided to have another show.
As you know, we have moved to signal. If you want an invite, tweet the show, or find one of us.
TL;DR, if you are using whatsapp to send cat photos to your family, you are ok. If you are using whatsapp business, they are making changes.
https://gizmodo.com/this-was-whatsapps-plan-all-along-1846060382
Security 258 – WhatsApp Privacy
We look at Apple’s new “Nutrition Facts” and try to figure out if they are actually useful (yes, but not really). We discuss the changes with WhatsApp, and where to move to.
https://9to5mac.com/2021/01/04/app-privacy-labels-messaging-apps/
Security – 257 – Signal and iPhone Guide
We start off on an article done by the BBC saying that Cellebrite has broken the signal encryption. Clearly, that is an issue if true. Turns out Signal quickly responds with an emphatic no, with evidence.
Here is the BBC article: https://www.bbc.com/news/technology-55412230
Here is the Signal Response: https://signal.org/blog/cellebrite-and-clickbait/
Then we talk about a new document created by apple to secure your iphone. Lots of basic things, but at the end there is a checklist that is just very easy to follow. Warning: PDF: https://manuals.info.apple.com/MANUALS/1000/MA1976/en_US/device-and-data-access-when-personal-safety-is-at-risk.pdf
Security 256 – SolarWinds
We discuss the solarwinds hack: https://krebsonsecurity.com/2020/12/u-s-treasury-commerce-depts-hacked-through-solarwinds-compromise/
https://krebsonsecurity.com/2020/12/solarwinds-hack-could-affect-18k-customers/
https://krebsonsecurity.com/2020/12/malicious-domain-in-solarwinds-hack-turned-into-killswitch/