Wasn’t the server an actual private server she had setup whereas this is a corporate app that is supposedly private if they are not lying and accessing the data. I mean this is way wore unless they put up a server to run the chat software.
I don’t think anything can be proven unless you have admin rights to the server at all times. signals are encrypted every time they are sent encrypted. can it be turned off with a flag? does it run in dev without it for troubleshooting and if so is it impossible to enable in prod.
The server can’t decrypt it if it doesn’t have the keys to do so. It can be proven that private keys never leave the local device. It can also be proven that the proper public keys are being provided, and that the local device alerts on public key changes with a partner are announced.
Of course, nobody as part of the linked article did any of that verification, but still, a server doesn’t need to be trusted to be functional.
It doesn’t matter what kind of server you’re using. Highly classified information has rules and regulations. Some stuff can only be talked about in certain buildings because the buildings were built to block listening devices.
This is a major fuck up that could have gotten American soldiers killed. Everyone involved should be in prison.
Everyone involved should be in prison.
I’m not sure we could prove this was knowing and willful. The Russian recipient of the messages is the most suspicious angle of attack.
Are you suggesting they didn’t know Signal wasn’t an approved platform for sensitive government communication and willfully used it anyway?
I hope you saw the transcripts of the messages today. Do you want to retract your statement?
Also, while using the app, there is zero accountability for who told who to do what within the government. FOIA is useless for any conversation happening within that app, self hosted or not.
