• ChumbleyBumbley@lemm.ee
    link
    fedilink
    English
    arrow-up
    34
    ·
    4 days ago

    Signal is very secure, but your encryption doesn’t matter when you add unknown people to your encrypted chats.

    It’s like buying the most secure, unpickable door lock and giving the key with the address on it to a complete stranger

    • Abnorc@lemm.ee
      link
      fedilink
      arrow-up
      5
      ·
      edit-2
      4 days ago

      I don’t doubt Signal per se, but I am surprised that government officials would use it to discuss military plans. I would have thought the government would use something developed by the military just to be sure that it’s safe.

      Sure, they can vet the source code, but it seems more straightforward for the government to develop their own solution than create a team to vet the security of something that they didn’t write. Maybe it’s overkill, but I’d almost think they should be doing this on vetted hardware as well. Signal is also relatively new, and they had to have a way to discuss these things beforehand.

      • monarch@lemm.ee
        link
        fedilink
        English
        arrow-up
        10
        ·
        4 days ago

        They don’t want to comply with government communition laws so they use signal instead.

      • Habahnow@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        4 days ago

        That’s what Buttigieg indicated. There are secure means of communicating classified information, with a process for ensuring people with clearance are the only ones allowed to view this information. I imagine those rules are in place exactly for this reason, to prevent accidental leaks.

        The rookies that Trump hired probably didn’t see the harm in doing it in this way, I mean come on, Signal is secure so what is there to worry about?

        Who knows what else has been leaked to the wrong people accidentally.

    • Siegfried@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      4 days ago

      I would have expected the USA to have their own private network for this shit… such a meh nation nowadays

      • Habahnow@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 days ago

        They do have ways of talking of classified information. Coincidentally, it is more tedious than using Signal and you are forced to keep records of those conversations, things that these people didn’t want.

      • JasonDJ@lemmy.zip
        link
        fedilink
        arrow-up
        2
        ·
        edit-2
        4 days ago

        Security and messaging is tricky to get right. Government uses a lot of COTS stuff because it’s easier to have someone to sue when shit goes south.

        That’s not to say that everything involved here isn’t a flagrant violation of every protocol and procedure involved in protecting classified information. It is.