Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It was incontrovertibly approved as it is only installable via MDM.

A likely explanation is that the communications director (or the people informing her) wouldn’t know to distinguish between Signal the app, and a Signal compatible app that is nearly indistinguishable from Signal. A lot like Kleenex is a common term for tissue paper regardless of brand.

When the leak was first revealed, there was loud speculation about the legality of government chat messages being set to auto-delete. This additional revelation, about the use of TeleMessage, shows that someone with a security background has actually thought about these things. It makes perfect security sense to archive messages somewhere secure, off phone, for record keeping compliance while ensuring that relatively vulnerable phones don’t retain messages for very long. It’s also an easy explanation for why such an app was created in the first place. There is an obvious market for it.



> It was incontrovertibly approved as it is only installable via MDM.

Only if this his standard govt issued phone. It's also been shown they are also using their own personal phones. The could easily be using unapproved phones some random DOGE'er bought gave them with an MDM setup, without any real oversight.


This is currently my bet. This looks like something I would set up— state actors are not in my threat list. But, I’m usually being paid to protect the employer not the employee.


> The could easily be using unapproved phones some random DOGE'er bought gave them with an MDM setup, without any real oversight.

No. Even if you managed to get the app and push it to devices, you can't just use TM-SGNL without having an archiving account from Telemessage.

Source: I manage this exact setup for several clients.


> you can't just use TM-SGNL without having an archiving account from Telemessage

Why wouldn't the government (DOGE in this scenario) be able to get an archiving account?


The device would have to be jailbroken right? These apps are (obviously) not in the App Store, I mean one of them is a cracked WhatsApp ...


No, you can distribute custom managed apps through Apple's MDM programme. https://support.apple.com/en-gb/guide/deployment/dep575bfed8...


Sorry yes I meant for personal devices. These are designed to be deployed under MDM on corporate devices

edit: found their install doc! https://smarsh.my.salesforce.com/sfc/p/#30000001FgxH/a/Pb000...


You can put personal devices on an MDM, many have special modes for this too.


These are all high profile, high net worth individuals. Their 'personal' devices will all be managed by MDM as well.


> This additional revelation, about the use of TeleMessage, shows that someone with a security background has actually thought about these things.

We only have evidence they used TeleMessage after the scandal. When the same guy let the press take a photo of his messages with Vance, Rubio, Gabbard and others.


If DOGE can storm into government offices and get root access to sensitive system without proper procedure, couldn't SECDEF and co. strong arm their way past the IT worker managing the MDM?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: