Comment by udev4096
6 months ago
> Graphite allows the operator to covertly access applications, including encrypted messengers like Signal and WhatsApp
That's pretty obvious. Signal doesn't protect you against full device compromise. Any app can trivially extract your signal conversations
> Any app can trivially extract your signal conversations
There is a security model baked in to the mobile OS that usually does not allow that.
Yes, and it can be subverted when the mobile OS is compromised.
That doesn't lead to
> Any app can trivially extract your signal conversations
In that case, can Signal users take advantage of this to export their own messages?
Yes but one would have to exploit a similar vulnerability as was exploited in this story. Apple would patch it as soon as it became popular because it could be used for an attack like this one.
I don't think that's obvious for non-techies