“The real problem with sharing Top Secret data over Signal is not the security of the app, it’s the security of the phone. And mobile phones are not secure against state level threat actor” | @thegrugq is correct, BUT…

…but he does miss:

“…and the other half of the problem is that you won’t have good OPSEC with good *tools* but lacking competent *users*”

End-to-end secure stupidity is a thing.

Fediverse reactions

Comments

One response to ““The real problem with sharing Top Secret data over Signal is not the security of the app, it’s the security of the phone. And mobile phones are not secure against state level threat actor” | @thegrugq is correct, BUT…”

  1. @alecm

    It’s been described elsewhere as being “like armoured vehicles with armed officers taking money between two cardboard boxes, and it’s the cardboard box at the end that we worry about, because the user at the end may not be as well defended.”

    Or, in this case, seems to think invoking the term “OPSEC” will provide all the magical coverage necessary.

Leave a Reply

Your email address will not be published. Required fields are marked *