Did the FBI Hack into Signal?

In this vidoe I review the forbes article of the fbi hacking into a locked iphone and retriving signal messages from it and how this is not a hack on the signal messenger app
₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿
Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436
Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV
Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079
Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF
Dash
Xh9PXPEy5RoLJgFDGYCDjrbXdjshMaYerz
Zcash
t1aWtU5SBpxuUWBSwDKy4gTkT2T1ZwtFvrr
Chainlink
0x0f7f21D267d2C9dbae17fd8c20012eFEA3678F14
Bitcoin Cash
qz2st00dtu9e79zrq5wshsgaxsjw299n7c69th8ryp
Etherum Classic
0xeA641e59913960f578ad39A6B4d02051A5556BfC
USD Coin
0x0B045f743A693b225630862a3464B52fefE79FdB
Subscribe to my KZbin channel goo.gl/9U10Wz
and be sure to click that notification bell so you know when new videos are released.

[@Calajese]

Forbes could put a gun to my head and tell me it's a kidnapping and I would still doubt it.

[@NicholasHenkey]

Glad to not be alone in that

[@rabywastaken]

good one lmao

[@can2835]

i literally see you everywhere, whats your secret

[@censoredterminalautism4073]

Clearly a false claim made with the assistance of a fake gun.

[@Calajese]

@@can2835 I've been watching "based" tech youtubers for some time and almost always leaving a comment, that's the trick

[@papageorge4852]

Forbes is one of those news outlets that will write "the sky is blue" and I'll get my ass up to go outside and double check.

[@unbrandedindustriesincorpo1701]

😂 right...lol

[@benjaminbrady7459]

I normally use newpipe so I can't interact with comments but I HAD to log in to say that this is one of the funniest and most relatable comments that I've ever read!

[@rajeshpandey2198]

@@benjaminbrady7459 ah yes a fellow new pipe users

[@unknown-mw4gm]

Idk man sky looks white to me

[@Aera223]

​@@unknown-mw4gmFor me, it's blue gray, with thin and small clouds

[@ne0nmancer]

I always chuckle when i see the 99% CPU use in your top bar

[@milo-ur8zp]

@@RealDeal-nm3zx prob compiling packages

[@amnottabs]

@@RealDeal-nm3zx mining crypto

[@RichardiOS275]

He's probably emerging some packages

[@eritert]

Converting classical MIDIs to FLAC

[@UnReaLgeek]

He’s probably running a vm in full screen for infosec - he can keep a consistent appearance without leaking any info.

[@embodyingocean189]

a l p h a b e t b o i s

[@Gersitoify]

I like that slang a lot. I use it when I talk about CBP

[@censoredterminalautism4073]

And Google is a subsidiary if ALPHABET. Shit is adding up.

[@nostep3966]

Glowbois

[@excitableboy7031]

G L O W I E S

[@wojtek8660]

Not locally encrypting conversations before sending them over encrypted messages cringe

[@uiopuiop3472]

@LeWolfie where would you keep them

[@notmyregret]

@LeWolfie uhh

[@ytirucsbo]

@LeWolfie Not many people own up to their mistakes in these comment sections. Props to you. Have a nice day man

[@TheRailroad99]

I disagree. For the avagerage person, this is most likely good enough. The same reason that a password list in your desk drawer is actually pretty safe: physical access is very unlikely. Of course this also leaves the data for potential viruses/exploits, but it is MUCH better than nothing at all. I think FBI etc having local access is actually a good thing. Only mass spying is a real problem.

[@jadelkhaleqghalayini5552]

@@TheRailroad99 I dunno about that; when I was a kid I had great fun in middle school nabbing the receptionist's password

[@M1America]

"Every phone like this takes 8 months or so for a vulnerability like this to come out" The conspiracy theorist in me thinks that is just how long it takes evidence to make it through discovery.

[@thomashanson3476]

Hausevult only the best of the best

[@alkaupadhyay7650]

Say me whatever you want, but there is vulnareblities in every technical machine existing on our planet. Some are found, some are not proofed enough

[@M1America]

@@username6338 I disagree. Operational security is incredibly difficult and requires doing a lot of things every time and not doing a lot of things even once in order to remain anonymous and private. All while putting yourself out there to learn the trade every day which puts you at extreme risk.

[@rozzy3528]

^

[@ShaunakHub]

Am I the only one who thinks that these 'articles' about security issues with Signal are being sponsored by the likes of FB and may be a lot of nosy Govt agencies? You have read the entire article and identified the flaws - tell me, how many end users are going to do that? Most will read the headlines and simply consider Signal to be not secure enough. Hope we remember the Israeli firm which 'hacked' Signal just before WhatsApp changed its security policies...

[@erenwayne]

Yeah, these big techs would resort to anything to stop users becoming aware of their malpractices.

[@transforgoku]

I mean, if anybody thinks using Signal on freaking *android and IOS* will keep their affairs private is simply delusional, both are tracking nightmares...

[@erenwayne]

@@transforgoku Well, you're right. Even if we used any app that is truly not tracking us you've got lots of other apps doing that work like screen capturing, the only way to have a secure and private phone is to have a degoogled/lineage os or linux phone.

[@transforgoku]

@@erenwayne That's exactly my point, the issue is not every android smartphone can be degoogled and install a version of Graphene/Lineage/Calyx OS, let alone an Iphone, linux phones are a good option to consider but I'm not very fond of them yet...

[@erenwayne]

@@transforgoku Yeah, considering these Linux phones aren't even available in many countries like mine and their mediocre battery life and stability, the issue with a so called private phone is that if they really are trying to be secure and private along with open source software/OS they've to implement open source hardware too, and sadly open source hardware is still a dream even in distant future, the big techs have their monopoly winding in every single aspect.

[@40nights40daystv]

When you could avoid severe prison time by literally just setting up a password in your app 😂 😎

[@Usertrappedindatabase]

YOU all made fun of me and my courier pigeons! who's laughing now BUCKO!?

[@FourOf92000]

I mean, if the punch cards are E2E encrypted

[@censoredterminalautism4073]

Did you turn off the lights to verify that the pigeons are not CIA agents?

[@Usertrappedindatabase]

@@censoredterminalautism4073 OMG CIA-GLOW-PIGEONS. become uniboomer, move to woods!

[@andrasfauszt1693]

I see you use IPoAC too. Its a great standard

[@Usertrappedindatabase]

@@andrasfauszt1693 hoh!!! I almost didn't look up what IPoAC was... lol the boss standard

[@EthanSeville]

3:00 6 char password. laughs in my 209bit entropy alphanumeric password on my phone

[@hootis8]

Moral of the story, if you're committing a felony maybe don't use the same phone you use to text your mom. And maybe don't use an iphone and maybe, just maybe use disappearing messages.

[@maximiliandeisz2961]

or maybe don't use digital devices at all but rather a use encrypted radio signal on an ultra-short distance bandwith, that is sent by an analog sender and received from an analog receiver. all while moving and changing the algorithm on a call to call basis like the enigma(don't fuck it up and use the same sentences in the same positions all the time), while also switching channels and sending over multiple channels. The senders got the sound of your voice, that has been distorted first, from vinyl records made from recycled vinyl from all over the country, pressed with presses from multiple persons, each solely made for your use

[@boneappletee6416]

The problem is that what's considered a crime or suspicious activity to certain law enforcement in one area is a lot different from another, where mundane activities might get you into hot water if a law enforcement agent wants to find something to pin on you. *cough* CCP's terrible human rights record, police state, authoritarianism *cough*

[@louiesatterwhite3885]

@@maximiliandeisz2961 gah damn how many layers of tinfoil is in your hat lol

[@maximiliandeisz2961]

@@louiesatterwhite3885 I prefer 3 as it gives the right coefficent of comfort and security. but again it was sarcasm

[@louiesatterwhite3885]

@@maximiliandeisz2961 I know it was sarcasm, my comment was a joke

[@MadsterV]

"Whatever tools the FBI used in the New York case, they're far from amateur" No one said the tools were. Unlocking a phone and opening Signal, to then claim you HaCkEd sIgNaL IS kinda amateurish.

[@amnottabs]

seems like da Zuck is doing whatever's possible to discredit Signal since papi Elon gave them a shout-out

[@chillinfartdotcc]

Signal has a worse threat: the mobile carriers and their zero rating plans, which means ISP level spying under the mantra of "give some of internet to poor people".

[@ElJosher]

Literally thought the same thing.

[@jeromeace1282]

​@@chillinfartdotccso that bypasses end to end encryption then? Not really familiar with this

[@chillinfartdotcc]

@@jeromeace1282 In the safest scenario they can track connections, in other scenarios, mitm attacks or even worse, Signal as whistleblower, as Facebook and Google are with zero rating plans here.

[@alouisschafer7212]

The Virgin getting caught with your Smartphone vs the Chad using burner phones and TailsOS

[@imresolyom8532]

There is a fork of the signal on Fdroid , its called Molly (with a purple signal background) It use local database encryption , and when you lock it , it will erease the data from the ram

[@imresolyom8532]

@@Yapha molly signal fork github

[@w1z4rd9]

What kinda lock, like a quick turn off screen kinda lock? Or a power off lock?

[@m4rt_]

4 min after upload :) ur awsome. keep on going

[@ImARichard]

To force BFU mode in iPhone X and newer there are 3 ways: 1. Reboot phone 2. Press the lock button rapidly 5 times 3. Press & Hold lock, volume up, and volume down at the same time.

[@LePeterK123]

So emergency call forces BFU? 5 times with lock button

[@mylife4631]

You the best you’re information is great 👍 thanks

[@bssmith222]

Forbes on tech is about as reliable as Peter Schiff on Bitcoin

[@elclippo4182]

Forbes and Bloomberg - best sources for IT security news.

[@RedFenceAnime]

I got android LOS which has a lockdown mode if you long press the power button, I know it stops all alternative unlocks like fingerprint and needs you to put in your password. But idk if it sets it form AFU to BFU (I didn't even know about these terms before this video) Would be cool if Signal integrated some options for Ripple other than "App hides when triggered".

[@alkeryn1700]

just so you know, if you phone isn't encrypted, that reboot stuff is useless. and if the rom isn't encrypted, you can just unlock the bootloader, flash twrp and then remove the lockscreen from adb shell. and even without that, you could solder the emmc to read it from a computer.

[@abhi36292]

@MorTobXD probably,but who knows there might be a backdoor by the manufacturer

[@devguyahnaf]

If Forbes tells me "You exist", I will have to touch my arm

[@jannikheidemann3805]

Cogitas ergo es. Your arm is unnecessary to perform a double ckeck on anti-trustworthy publications.

[@tylermustardloooser386]

I mean I just used it to exchange rage comics so I think we're safe

[@exxon47_]

Android has a feature called lockdown which is an option in the power menu where you can just hold down your power button and select the lockdown and without restarting your phone it will put it into BFU mode

[@ElNegus9985]

What type of specific newsites do you usually check out for tech news?

[@boneappletee6416]

Also wondering this. Would be cool if he shared some of the places he's found to be accurate and have interesting/relevant tech news.

[@UnixTMDev]

please inform me, what wm/de do you use

[@ashg9993]

Very interesting to know!

[@ejonesss]

a fix for the bfu/afu problem is to have the device purge the ram each time the phone is locked and put it back into bfu mode. signal could write a code that purges the memory forcing the device into bfu mode but if apps are not allowed that level of access then the next thing they could do is intentionally add a bug that crashes the phone causing a kernel panic each time it is woken up so the phone has to reboot. it may be possible that the phone has an equiv to the terminal command sudo shutdown -h now witch installer packages does to immediately start the install that requires restart. be careful about flashing roms to the device i heard somewhere that android phones now disable the camera if you root the phone.

[@w1z4rd9]

If such app has access, think about what malicious apps can do.

[@w1keee]

6:25 this mode can be accessed by pressing the off button 5 times quickly

[@boneappletee6416]

On some Android phones, emergency mode also automatically sends an SMS/call to emergency services - at least after a short countdown.

[@krackerkruncher]

If you have those slide pattern passwords you can just tilt the phone screen up to the light to see the pattern that the persons finger oil left on the screen and see their password

[@ordici_]

There is a fork of signal that has encryption. It's called Molly. Its fully compatible with the normal signal app and servers it's not a different thing.

[@proloycodes]

signal is encrypted too?

[@ordici_]

@@proloycodes The OMEMO protocol that Signal uses is end-to-end encrypted, meaning that nobody but you and the person you are talking to is able to know what is being said. Anyone on your local network, the internet or the Signal developpers are completely unable to read your messages. On the other hand, the Signal app itself that is on your phone and contains all the messages is not encrypted, this means that if, by example, the FBI is able to bypass the lock of the phone, as it is being talked about in the video, the FBI is able to read every single message, just like you are able to after you unlock your phone. This is where the Molly fork comes in. Molly is the exact same as the Signal app, but with the added functionality of being able to use a password to encrypt all the Signal data. This means that if someone can bypass the phone security, which is often weak, they would then have to find your Molly password.

[@yrws6756]

7:33 Because Graphene mostly supports Pixels you could also use /e/OS.

[@Eduardo-hg2bd]

What can we do to make forensic methods and bruteforce attempts useless?

[@jannikheidemann3805]

Increase the amount of effort required to conduct them to be unfeasible to put up.

[@nekosh1ru]

Android has a feature called "Lockdown" on some devices, iust hold power and tap the lockdown button and it will go into BFU and disable biometrics

[@keanu_]

Who tf uses Smart Lock?

[@AntiWanted]

Nice

[@DieselRamcharger]

its simple. YOUR PHONE ISNT PRIVATE, DONT DO ILLEGAL SHIT WITH IT!

[@SCTproductionsJ5]

Only problem with BFU mode on Android, you can't GPS track it! :( How would we (software developers) create an operating system that could let you monitor your devices' GPS while having it in an encrypted state?

[@papageorge4852]

How would we (software developers) create an operating system that could let *us* monitor your devices' GPS while having it in an encrypted state? fixed it

[@SCTproductionsJ5]

@@papageorge4852 haha yeah, it sure does feel like that :( there are quite a few open source options on F-Droid, though. I haven't tried out any of them.

[@yrws6756]

Can anyone explain to me why people use biometric identification, I never understood it. For me it is not more convinient to scan my face or finger instead of typing in my code(12 digits) which takes 4 seconds.

[@MB-up3mh]

Well with fingerprint it takes 0.5s to unlock and you don't need to type or draw stuff which is prone to errors. Much more convinient

[@cherubin7th]

Noobs always forget their password after 5 minutes.

[@MsHojat]

Yeah I heard about this AFU/BFU thing a while ago. I think from Braxman. If you haven't heard of Rob Braxman on KZbin I suggest you guys check him out. At least if you care about privacy. His content is only really about privacy so if it's not your thing then don't bother checking him out.

[@transforgoku]

I wish he put out some tutorial for de-googleing android phones...

[@teddybearisms2505]

I would like to see a specific alternative password for my phone that makes it wipe itself. Can we get this?

[@chrisatmachine]

OXEN

[@Toyking10]

So is there really any way to get the convenience of biometrics without the innate security risks of it?

[@sourcream9749]

Fast fingers

[@abdoun8214]

Twisted Plot : Signal is FBI honey pot and they making all these drama just to look legit EndToEnd security 💀💀💀

[@RhinoBlindado]

Bro that damn CPU usage, you running on a Celeron Gold or what?

[@jannikheidemann3805]

Unused CPU is free real estate. He may or may not have claimed it.

[@maximiliandeisz2961]

you are not using direct connections to your communication partners, that are guarded 24/7 by armed guards with a kill order, on a device solely build by you (even storage and microcontroller), and a communication protocol that is encrypted multiple times and only used by you and your friends? Seems kinda cringe to me

[@maximiliandeisz2961]

@MorTobXD Damm man can’t even tell bots and humans apart. Point still stands nothing is 100% secure. You just need to be secure enough that other targets are more lucrative to exploit. The armed guards refer to the fact that all your security does nothing if the other side is leaky. So a semi open groupchat can have the safest encryption yet still isn’t safe

[@distortedfocus7698]

With any end to end encryption, the device on either end must be hacked like what happened with encrochat. Someone should know right away that the headline is misleading.

[@nanopone]

vidoe nice description, badtuber hurrr

[@Juss-Saiyan]

Ok then explain how they got tucker carlsons messages in signal app when he was setting up interview with the kremilin.....?

[@carlthecaveman]

So the most important thing you can do is write your representatives and tell them if they don't disband the three letter agencies, you'll replace them with someone who will.

[@DraconicCitadel]

actually your title is misleading, and the forbes article title pretty much told me exactly what I expected, but good video nonetheless , at 0:35, don't know why you said that

[@bastiandeux]

Librewolf just got experimental builds of .deb packages and a windows version even more alpha a few days ago 💥

[@ChristianBMundy]

Nice!

[@AcidiFy574]

Hopefully LibreWolf will become the brave browser of the Firefox world

[@richardtickler8555]

so they try to smear signal

[@SCTproductionsJ5]

Why doesn't Signal encrypt them locally?? :o

[@GabrielM01]

because you will need to decrypt it to read it, and if you already placed your phone to AFU mode, chances are you already opened signal and if it had that functionality, all messages would be decrypted right there

[@nostep3966]

They do. It just gets decrypted when you first unlock your phone. Would be nice if they were re-encrypted every phone lock, but they probably weighed that against resource usage

[@w1z4rd9]

@@nostep3966 So this is the disadvantages of Instant Messaging?

[@dagon99]

woah

[@sanlys]

Signal on mobile now has an option for locking it with a password and or fingerprint

[@jannikheidemann3805]

The Signal devs likely watched this video and may have thought this would be a good idea to rebuke misleading headlines and make thier app safer for the willing and concerned user.

[@hi._.golgo137]

​@@jannikheidemann3805yeah sure that's why they pulled Tucker Carlsen s texts like it was nothing. They have backdoor access, period.

[@swenmcheath1798]

Damnit, i was fast, but not fast enough

[@Leonard_MT]

We don’t care

[@swenmcheath1798]

@@Leonard_MT how nice of you to let me know!

[@VectorNodes]

Ha my friend sent me a link to that

[@Ultrajamz]

Wonder if an iOS shortcut can be set to auto go into BFU mode (without restart) at set times of day.

[@amnottabs]

I had an Samsung Note Edge phone with a dying motherboard that would go into BFU mode a few times during the day; I knew because it would ask for the alphanumeric password instead of PIN/fingerprint to unlock so I guess it can be reproduced on Android too, something like a soft reset

[@umamifan]

I hacked into signal.

[@afallingtree9114]

me nether

[@mruwuowo4599]

me nether

[@dexah4842]

fast 1m

[@nikoniko-nicomuffler]

6:18 for me pressing power 5 times works

[@NicholasHenkey]

Sweet, just recorded a Graphene install video! Trying to publish by next Thursday

[@saskiafalken6350]

I prefer reddit to Forbes for taking over all the thinking for me.

[@CrazyIdiot1000]

what are supercookies?

[@igorthelight]

You are just one google away from the answer ;-)

[@m1kr0kosmos]

RAM 69% nice

[@alexbalex9779]

Anything that censor lover jack Dorsey promotes is a big no no, Especially when it comes to privacy. Follow the money....

[@sb_1389]

Did he endorse Signal?

[@Bullminator]

Or you can pull Gota Call Saul and use cheap old phone models.

[@malcolmseigmiller1622]

I'm not an American but it would seem to me that the police using your face to unlock your phone is a violation of the 5th amendment

[@theplasmaistplasma6613]

It’s weird, and they’re are lots of edge cases, until recently, this only applied for pin passwords, not biometric authentication, but a recent case interpreted that it also applies for biometrics and also it doesn’t apply at borders www.androidauthority.com/what-to-do-when-police-ask-for-your-password-privacy-982219/

[@kipter]

Interesting point. Not sure if there is legal precedent but you have a right to not testify against yourself.

[@YuraJayRJay]

BTW, Telegram has support for passcodes with local DB storage encryption. That's another point to consider when it comes to security without sacrificing usability.

[@devikakrishna4464]

*laughs in decentralized messaging* jami.

[@Unadvised8849]

Jami?

[@devikakrishna4464]

@@Unadvised8849 it's pronounced yami must be a typo

[@dsihacks]

o no

[@dsihacks]

@@eepykami o no

[@dsihacks]

@@eepykami o no

[@MountainMn22]

I feel like Signal added this 🤔🤔… with the pin they ask for every few days… am I wrong? I know you made this two years ago, I’m a lil slow

[@diegomarquez3293]

I knew it

[@asmolbean9300]

*the alphabet bois*

[@Hatsune_Miku]

oi

[@iseceepcool2]

Despite wickr being closed source I think it's more secure than signal as it gives you the option to use a password or pin. It has an option to use biometrics and it looks every time the app isn't in focus like switching to another app.

[@theChotkiyOne]

Element and Wire look better

[@amn357]

Telegram!

[@ruxxuc2091]

You want privacy You want Anonymity ...creat onion host and use irs and chat or sell your grandma cookies and the FBI will never know

[@chrisx1197]

Anything can be hacked, better to use a pidgeon.

[@Mbeluba]

Pigeons are vulnerable to birdshot in the middle attacks

[@AutumnWind92]

Pidggeons are 5G drones

[@survivor303]

no to signal, it is easier just say NO to that thing.

[@igorthelight]

Easier. But is it smarter? :-)

[@survivor303]

@@igorthelight yes, use wire.

[@KristinaUSA-x5n]

Considering you have hijacked and cloned my phone and SIM swapped with Cytrox Circles and NSO spyware with Comcast Verizon.

[@EthanSeville]

2:30 Closes eyes so faceid doesnt work ;)

[@MikeNugget]

Alphabet boys 😂

[@lazarpro3030]

nice fud fbi

[@GabrielM01]

Thats no Signals fault

[@myentertainment55]

News that have in title different thing in title than it actually is(Or it's true but just technically) Nothing new :D

[@tonyj4435]

First

[@EnderCrypt]

"on a locked iphone" wut.. thats not exactly difficult lmao (and no, i dont mean that I CAN do it, i mean) local access... with local access, anyone can do practically anything, nothing compared to actual remote access

[@Hanagigi]

Forbes has become a sponsored ad platform, all its content seems to be pushing someone's agenda instead of being news.

[@jannikheidemann3805]

It's a private entity available for money. What else could it have become?

[@largetea8475]

Jack Dorsey, Elon Musk and many other big names have endorsed Signal and have some sort of monetary stake in it as "donators." Should tell you all you need to know. Honeypot.

[@D-K-C]

Ъ

[@sunflowerguy5314]

I wish DuckDuckGo would create an operating system and release a phone. They should do a crowdfund campaign or try for BTC donations. I'm sure they would get heaps

[@deldrinov]

Fale news be fake newsin'

[@Nuh_uh.ur_gay]

First again

[@RussianBot69420]

Boo

[@Chris_Tinacan]

Damn, beat me

[@Chris_Tinacan]

Also, cool dog

[@Leonard_MT]

As if we care

[@Chris_Tinacan]

@@Leonard_MT Enough to reply tho...

[@aquarius5719]

No honest person needs to escape FBI. But escaping FB is a big deal.

[@jannikheidemann3805]

Don't talk horse refuse! Do you really think that a) the law is perfect in a way that can only be broken by dishonest persons, and b) that the FBI does not overstep the safeguards against tyrannical surveillance set forth by the letter of the law?

[@alch3myau]

What sort of clickbait bs is this. Shameful.

[@saragerald5829]

This is superb! I had no idea that my deleted blockchain could be back again if not *MINSLEGEND* , I am so Fortunate to meet him..

[@saragerald5829]

This is superb! I had no idea that my deleted blockchain could be back again if not *MINSLEGEND* , I am so fortunate to meet him...