CISA warns the Signal clone used by natsec staffers is being attacked, so patch now

The US security watchdog CISA has warned that malicious actors are actively exploiting two flaws in the Signal clone TeleMessage TM SGNL, and has directed federal agencies to patch the flaws or discontinue use of the app by July 22. TeleMessage came to prominence after the Signalgate fiasco, when then-US national security …

[cd]

'History repeats itself, first as tragedy, second as farce.'

--Karl Marx

[Anonymous Coward]

And Ford (almost) said that History is bunk.

And bunk certainly seems to repeat itself.

[Pascal Monett]

Sci-Fi already has the solution

None of this should have happened had the government idiots in charge and their drones used proper, secure, government channels of communication.

But those are slow and cumbersome, and today's "elite" (using that term with a truckload of reservations, annotations and addendums) just can't bring themselves to repect proper procedures (ok, they'd have to get to know the procedures in the first place - but who has time for that ?) so they hitch on to whatever app they can download (uh, why can they download things on their government-issued phone ? And why aren't they already in jail if they discuss National Security issues on their personal phones ?) and "make things go faster".

It seems to me that, if the police aren't allowed to arrest traitors anymore, then a Bureau of Sabotage is highly needed.

[Doctor Syntax]

Re: Sci-Fi already has the solution

"None of this should have happened had the government idiots in charge and their drones used proper, secure, government channels of communication."

Idiot is as idiot does.

[Anonymous Coward]

Have I Mentioned That....................

........an end point infected with NSO/Pegasus or with Paragon/Graphite.............

........makes Signal or Telegram or WhatsApp COMPLETELY MOOT...................

....because the bad guys who dropped the malware can read everything in plain on the end point.

This is just more MISDIRECTION about the alleged power of end-to-end-encryption.

Pity Jamal Kashoggi is not around to help us understand!!

[Anonymous Coward]

Have I Mentioned That....................

...private encryption on air-gapped end points is the antidote to snoops reading ANY form of transport......E2EE enabled or not!

Yup.....do your private encryption/decryption away from the internet....and the transport does not matter!

[IGotOut]

Does it matter?

Given the incoherent ramblings and the daily, if not hourly, change of plans, even if you had full access to the chats, you'd still have no bloody idea what they were up to.