“I am all for human rights and Edward Snowden is my inspiration due to his bravery and value, even when he faced hard consequences for his actions,” Leonardo told me on phone. More: Snowden Explains Why Telegram Messenger App is Unsafe Video demonstration 1 “The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of actions that include app opening, clicking on cancel, and using the home button.” Though, it requires the attacker to have a physical access to the targeted device.Ī CVE ( CVE-2018-9840) has also been assigned this vulnerability. In his blog post, Leonardo stated that in Signal’s version 2.23 and below, an attacker can follow below mention steps to access the main application window without authentication.
The vulnerability works in such a way that it allows attackers to bypass password protection and TouchID with a certain sequence of actions. Leonardo Porpora (pseudonym n0sign4l), a 17-year-old high school student from Arezzo, Tuscany-Italy, has discovered an easy to exploit vulnerability in popular encrypted messaging app Signal for iOS that would let malicious hackers bypass the authentication process and access user chats.Īccording to Leonardo, the vulnerability affects all versions of the application before 2.23.1.1. The encrypted messaging app Signal is Edward Snowden’s favorite app.
0 kommentar(er)
