Signal slams Cellebrite security over alleged security holes.
Encrypted-messaging app Signal says it has found flaws in software used by cyber-security company Cellebrite. The two companies have been at odds since Cellebrite claimed to have cracked Signal’s secure messaging last year – a claim fiercely disputed.
In the latest spat, Signal boss Moxie Marlinspike joked he had acquired Cellebrite’s system after it “fell off a truck” in front of him. And, he claimed, its software was so flawed he could easily hack into it.
“There are virtually no limits on the code that can be executed,” he blogged, suggesting the flaws could be used to access data, change settings, and more.