Privacy News Self-destructing messages received on 'Signal for Mac' can be recovered later

[LASER_oneXM]

Content source

https://thehackernews.com/2018/05/signal-secure-messaging.html

It turns out that macOS client for the popular end-to-end encrypted messaging app Signal fails to properly delete disappearing (self-destructing) messages from the recipient's system, leaving the content of your sensitive messages at risk of getting exposed.

For those unaware, the disappearing messages in Signal self-destruct after a particular duration set by the sender, leaving no trace of it on the receiver's device or Signal servers.

However, security researcher Alec Muffett noticed that the messages that are supposed to be "disappearing" can still be seen—even if they are deleted from the app.

Another security researcher Patrick Wardle reproduced the issue and explained that macOS makes a copy (partial for long messages) of disappearing messages in a user-readable database of macOS's Notification Center, from where they can be recovered anytime later.

If you want to keep an on your incoming messages without having to check your inbox obsessively, macOS desktop notifications (banners and alerts) that appear in the upper-right corner of your screen is a great way to alert you of things you don't want to miss.

 

[Deleted member 65228]

Well, that's not good news for Signal users running macOS. It is what it is though, you live and learn... I'm sure the company will do what they can to resolve this in a timely fashion and will then update the product with a version release.

It isn't really something you'd normally think about from nothing, it's a pretty arbitrary thing to remember (the notification center being a potential security interruption). Now all of us know to think about that for the future.

 

[TheJokerz]

I found it funny at the bottom it says "or your wife"

 

[Deleted member 178]

You can't hide from governments, their resources and logistics are too vast. If a company refuse to give their decryption key, they will just mount an op to get it...

(yeah i watch a lot of spy movies ^^ )