Security: Critical Bug in Signal Messenger by ash

View this thread on: hive.blog | peakd.com | ecency.com

security · @ash · Oct 6 '19

$0.93

Security: Critical Bug in Signal Messenger

![image.png](https://files.steempeak.com/file/steempeak/ash/U3TSI7kL-image.png)

> Google Project Zero researcher Natalie Silvanovich discovered a logical vulnerability in the Signal messaging app for Android that could allow malicious caller to force a call to be answered at the receiver's end without requiring his/her interaction.

Sources:
* https://thehackernews.com/2019/10/signal-messenger-bug.html
* https://bugs.chromium.org/p/project-zero/issues/detail?id=1943

-----

The problem with Signal and other Messengers like WhatsApp/Telegram is that they're not only NOT decentralized, but they are also asking for a soft KYC in form of your Mobile Number. And in ~150 countries you have to identify yourself in order to get a Sim Card. It's a mess in my opinion. 

If you're looking for a working alternative, checkout [Jami](https://jami.net/). Their approach is to decentralize as much as possible! Only thing it's missing at this point are group chats, but according to the devs this feature is being worked on, and they hope to deliver at Q1 2020.

-------------
[![](https://i.imgur.com/S5Z1jNr.png)](https://smarturl.it/securevpn)
[Secure & Anonymous VPN - Uploadfilter? Censorship? No Thanks!](https://smarturl.it/securevpn)

### [💸BUY STEEM💸](https://smarturl.it/binance)

Follow Me
[🦋Twitter](https://twitter.com/btsfav) || [♨️Steem](https://steempeak.com/@ash)v|| [📺DTube](https://d.tube/#!/c/ash) || [DMail fav.id](https://app.dmail.online)

*[Image/Pixabay](https://pixabay.com/illustrations/communication-phone-call-message-1015376/)*

👍 matt-a, ash, stackin, sbi2, scaredycatguide, dmwh, jdkennedy, satoshibit, doitvoluntarily, koncreteninja, steem-plus, britcoins, kimchi-king, tinoschloegl, ajvest, funkit, curation.stem, steembet.asia, blackfireburn, stargarden, dinasapitri, qrater, stmdev, bilpcoin.pay, tanvirsadatripon, thebilpcointrain, steeming-hot

`author`	ash
`permlink`	security-critical-bug-in-signal-messenger
`category`	security
`json_metadata`	{"app":"steempeak/1.17.1","format":"markdown","tags":["security","signal","messenger","jami","palnet","stem"],"users":["ash"],"links":["https://thehackernews.com/2019/10/signal-messenger-bug.html","https://bugs.chromium.org/p/project-zero/issues/detail?id=1943","https://jami.net/","https://smarturl.it/securevpn","https://smarturl.it/securevpn","https://smarturl.it/binance","https://twitter.com/btsfav","/@ash","https://d.tube/#!/c/ash","https://app.dmail.online"],"image":["https://files.steempeak.com/file/steempeak/ash/U3TSI7kL-image.png","https://i.imgur.com/S5Z1jNr.png"]}
`created`	2019-10-06 09:06:15
`last_update`	2019-10-06 09:06:15
`depth`	0
`children`	3
`last_payout`	2019-10-13 09:06:15
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.471 HBD
`curator_payout_value`	0.458 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	1,554
`author_reputation`	286,803,743,324,398
`root_title`	"Security: Critical Bug in Signal Messenger"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,277,305
`net_rshares`	3,835,923,401,998
`author_curate_reward`	""

properties (23)vote details (27)

voter	rshares	pct
ajvest	1,214,167,611	50%
ash	439,150,551,473	100%
matt-a	2,516,538,030,642	50%
scaredycatguide	89,206,372,500	23.75%
doitvoluntarily	11,480,624,086	100%
koncreteninja	4,743,278,498	100%
funkit	1,023,936,033	100%
stargarden	158,529,577	100%
stackin	320,066,697,131	25%
satoshibit	15,445,992,029	100%
dinasapitri	158,398,279	100%
britcoins	2,444,413,307	100%
steembet.asia	622,081,516	100%
steem-plus	4,251,199,538	0.26%
kimchi-king	1,725,301,017	50%
tanvirsadatripon	53,324,695	25%
dmwh	82,946,679,454	100%
tinoschloegl	1,493,705,298	100%
stmdev	144,536,848	1%
sbi2	271,335,281,765	26.82%
steeming-hot	0	0.01%
qrater	153,737,756	100%
blackfireburn	298,134,708	100%
jdkennedy	70,315,966,261	100%
curation.stem	824,627,158	75%
thebilpcointrain	26,068,118	1%
bilpcoin.pay	101,766,700	1%

@blackfireburn · Oct 6 '19

Interesting but I think there is still a space for centralized applications, also even if you can be identified by your number there is no way for a bad actor to read your messages. As such just knowing you sent a message doesn't help anyone much.
I will look into Jami
thanks

Posted using [Partiko Android](https://partiko.app/referral/blackfireburn)

properties (22)

`author`	blackfireburn
`permlink`	blackfireburn-re-ash-security-critical-bug-in-signal-messenger-20191006t104330078z
`category`	security
`json_metadata`	{"app":"partiko","client":"android"}
`created`	2019-10-06 10:43:30
`last_update`	2019-10-06 10:43:30
`depth`	1
`children`	0
`last_payout`	2019-10-13 10:43:30
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	352
`author_reputation`	12,976,827,188
`root_title`	"Security: Critical Bug in Signal Messenger"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,279,221
`net_rshares`	0

@dmwh · Oct 6 '19

$0.04

Thanks for the info.  I will check out the article and Jami.  I primarily use Signal but I'm not a fan of the mobile number registration.  I believe that they did it in order to search through contacts on the device to discover other Signal users which seems like a bit of a expedient shortcut but not the best solution.

👍 sbi2

`author`	dmwh
`permlink`	re-ash-pyyrju
`category`	security
`json_metadata`	{"tags":["security"],"app":"steempeak/1.17.1"}
`created`	2019-10-06 17:36:12
`last_update`	2019-10-06 17:36:12
`depth`	1
`children`	0
`last_payout`	2019-10-13 17:36:12
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.019 HBD
`curator_payout_value`	0.018 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	320
`author_reputation`	1,938,573,967,016
`root_title`	"Security: Critical Bug in Signal Messenger"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,289,187
`net_rshares`	201,965,912,472
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
sbi2	0 B		201,965,912,472	19.81%

@steem-plus · Oct 7 '19

SteemPlus upvote

Hi, @ash!

You just got a **0.26%** upvote from SteemPlus!
To get higher upvotes, earn more SteemPlus Points (SPP). On your Steemit wallet, check your SPP balance and click on "How to earn SPP?" to find out all the ways to earn.
If you're not using SteemPlus yet, please check our last posts in [here](https://steemit.com/@steem-plus) to see the many ways in which SteemPlus can improve your Steem experience on Steemit and Busy.

properties (22)