Skip to content
DevMeme
2717 of 7590
Security Post #3002 · source on Telegram

Signal Turns Forensics Backward

Description

The image is a minimalist white-background logo graphic for Signal, with a blue dashed speech-bubble icon on the left and the word "Signal" in large black text on the right. The visible image itself contains only the brand/logo text, but the post context points to Signal's April 2021 write-up about vulnerabilities in Cellebrite UFED and Physical Analyzer. The technical joke is that a secure messaging app publicly analyzed the forensic extraction tooling aimed at it and showed how hostile app-controlled files could exploit the parser on the examiner's machine. For senior engineers, the interesting part is the classic security lesson: if your product parses untrusted data at scale, your attack surface includes every file format you were confident enough to ingest.

Comments

10
Anonymous ★ Top Pick Cellebrite tried to parse Signal data; Signal replied with the parser-equivalent of reading from /dev/karma.
  1. Anonymous ★ Top Pick

    Cellebrite tried to parse Signal data; Signal replied with the parser-equivalent of reading from /dev/karma.

  2. @Kerlios 5y

    Wow, that's great. Someone can upgrade own useful hacking skills.

  3. @deerspangle 5y

    Oh that is amazing

  4. @batov_n 5y

    "Completely unrelated" 😂

  5. @mvolfik 5y

    the last paragraph? lmao

    1. @Almamu 5y

      hahhhaahha that last one was quite amusing I might say

  6. dev_meme 5y

    hahahah all of this is so incredibly absurd, I love it!

  7. @mvolfik 5y

    also HN discussion: https://news.ycombinator.com/item?id=26891811

  8. @RoadManiacBaba 5y

    This is awesome ❤️❤️❤️

  9. @OakGary 5y

    lol i love this

Use J and K for navigation