Ask HN: Help me understand Signal communication blurb
4 comments
Elsewhere in that blog post:
we found that it’s possible to execute arbitrary code on a Cellebrite machine simply by including a specially formatted but otherwise innocuous file in any app on a device that is subsequently plugged into Cellebrite and scannedHN Discussion about the blog (2021)
https://news.ycombinator.com/item?id=26891811
https://news.ycombinator.com/item?id=26891811
appreciate the extra info!
I did not connect these dots, I am now, thank you!
>The completely unrelated
>In completely unrelated news, upcoming versions of Signal will be periodically fetching files to place in app storage. These files are never used for anything inside Signal and never interact with Signal software or data, but they look nice, and aesthetics are important in software. Files will only be returned for accounts that have been active installs for some time already, and only probabilistically in low percentages based on phone number sharding. We have a few different versions of files that we think are aesthetically pleasing, and will iterate through those slowly over time. There is no other significance to these files.
can someone help me understand if this is serious or not and what it actually means?
[0] https://signal.org/blog/cellebrite-vulnerabilities/