Signal flaws allowed rogue servers to decrypt users’ contact queries

Security researchers at V12 discovered two critical vulnerabilities in Signal’s Contact Discovery Service that could allow a malicious server operator to escape the protections of its Intel SGX enclave. The flaws enabled arbitrary reading of protected enclave memory and, in the more severe case, code execution inside the trusted environment. V12... Weiterlesen