您现在的位置是:娛樂 >>正文
【】
娛樂943人已围观
简介On Monday, Signal, often viewed as the most secure messaging app, shared that a security breach of i ...
On Monday,Signal, often viewed as the most secure messaging app, shared that a security breach of its phone number verification service provider affected 1,900 of its users. Due to the breach, these users' phone numbers were exposed.
Tweet may have been deleted
According to Signal's post detailing the situation, the provider, Twilio, was targeted in a phishing attack. In Twilio's own postexplaining the situation, the company says it was a "sophisticated social engineering attack designed to steal employee credentials." The attack was successful in obtaining credentials from some of Twilio's employees. Twilio says that around 125 of its customers had data compromised during the attack. One of these affected customers is Signal.
On the bright side, Signal's reputation as the most secure messaging app is intact thanks to its service being 100 percent end-to-end encrypted. Without access to a Signal user's physical device, a bad actor could not access that user's messaging history. So, any sensitive information that was shared within messages on Signal have not been compromised. Profile data, contact list, and other data also was not compromised, again, thanks to Signal's design.
However, Signal warns that there were issues that arose for the users affected by the breach:
"For about 1,900 users, an attacker could have attempted to re-register their number to another device or learned that their number was registered to Signal. This attack has since been shut down by Twilio."
SEE ALSO:Apple delayed Telegram's iOS app update due to unauthorized use of its emojiAccording to Signal, one of those 1,900 users reported that their account was re-registered on another device without their authorization. Also, as Signal notes, most of its users were not affected at all by the security breach.
That there's been fairly little fallout from this security breach is a testament to Signal's security. But the breach is also a reminder of Signal's one glaring flaw: the requirement that a user registers their phone number to use the messaging service. Signal has previously hinted that it will soon allow people to use usernames instead of their phone number, but there is currently no scheduled roll out for that feature.
TopicsCybersecurity
Tags:
转载:欢迎各位朋友分享到网络,但转载请说明文章出处“夫榮妻貴網”。http://new.maomao321.com/news/58f59899343.html
相关文章
How Hyperloop One went off the rails
娛樂In December 2014, an engineer with the unlikely name Brogan BamBrogan was in the driveway of his cla ...
【娛樂】
阅读更多NFL GM says humans aren't meant to play football, backtracks faster than Cam Newton
娛樂The Buffalo Bills are an NFL team. Doug Whaley is general manager of the Buffalo Bills. His job is t ...
【娛樂】
阅读更多Amy Schumer advocates for gun control by declining to wear underwear
娛樂Today is National Gun Violence Awareness Day, and everyone from Barack Obama to Kim Kardashian is pa ...
【娛樂】
阅读更多
热门文章
- There's a big piece of fake chicken stuck to this phone case
- Tasmanian devil returns to San Diego Zoo after getting a pacemaker
- Who the hell does this Jeopardy champion think he is?
- Paul Ryan just wants Republicans to unite 'before the fall'
- This chart shows just how high Simone Biles can jump
- 'Alice: Through the Looking Glass' bombs worldwide as shadow looms over Johnny Depp
最新文章
'The Flying Bum' aircraft crashes during second test flight
Thom Yorke did a lot of scolding at the latest Radiohead concert
James Blake rudely discusses how perfect unreleased Frank Ocean music is
Lauren Conrad answers your prayers, will star in 10th anniversary special of 'The Hills'
Chinese gymnastics team horrifies crowd with human jump rope
Understandable Photoshop battle ensues after man runs with 'nose tampon'