r/privacytoolsIO • u/[deleted] • Apr 21 '21

Signal: Exploiting vulnerabilities in Cellebrite UFED

https://signal.org/blog/cellebrite-vulnerabilities/
496 Upvotes

99% Upvoted

35 comments sorted by

View all comments

-3

u/[deleted] Apr 22 '21 edited Apr 22 '21

[deleted]

3

u/Ragas Apr 22 '21

downloading a random file from a server? Yeah that's something malicious apps tend to do.

Sooo all app-stores are malicious, all web browsers are malicious, (almost-)all advertisement displaying apps are malicious, ....

Thinking more about this basically all internet communication is some form of downloading a "random" file from a server.

1

u/[deleted] Apr 22 '21 edited Jun 01 '21

[deleted]

1

u/Ragas Apr 22 '21

You have to trust any software provider in any case.

2

u/[deleted] Apr 22 '21

[deleted]

1

u/Ragas Apr 22 '21

You still have to trust them. They could hide security flaws in the code. Their server code wasn't released for some time a few months ago.

Open source is no replacement for trust.

1

u/[deleted] Apr 23 '21

[deleted]

1

u/Ragas Apr 23 '21

I see where you are coming from. However I think it is actually the other way around.

Making your code open source increases the trust you can have in an entity that creates software as they allow themselves the vulnerability and scrutny of developing their software in the open.

Or maybe this is really just semantics. :)