237
submitted 1 year ago by BrikoX@lemmy.zip to c/technology@lemmy.zip

Yesterday, I published an analysis of what I could publicly find about TM SGNL, the obscure and unofficial Signal app used by Mike Waltz, and presumably also by Pete Hegseth, JD Vance, Tulsi Gabbard, and other fascists in Trump's government. Afterwards, someone privately sent me the URL https://www.telemessage.com/wp-content/uploads/2024/12/Signal.zip.

all 27 comments
sorted by: hot top new old
[-] pennomi@lemmy.world 92 points 1 year ago* (last edited 1 year ago)

The original git repo has a .il tld. Hmmm… I’m just gonna throw it out there, but an app created by foreign nationals might not be a good choice for top secret communication.

[-] spankmonkey@lemmy.world 55 points 1 year ago* (last edited 1 year ago)

It is if the person is a foreign asset.

[-] RustyShackleford@literature.cafe 25 points 1 year ago

It is if the official is being payed to lure fellow officials into making big security mistakes. Anyone who knows a sociopath knows they would sell their mom for a candy bar.

[-] jagged_circle@feddit.nl 0 points 1 year ago

If its open source and audited, it doesn't matter.

[-] pennomi@lemmy.world 6 points 1 year ago

Sure, but this is a very obscure project. It has few eyes holding it accountable.

[-] jagged_circle@feddit.nl -1 points 1 year ago

The government is buying it. And cryptocurrency companies. That's a lot of money and a lot of eyes.

[-] pennomi@lemmy.world 3 points 1 year ago

Clearly not enough money and eyes, because it got hacked.

[-] jagged_circle@feddit.nl 0 points 1 year ago

Yeah. That's the story.

We need to ensure the government only uses open source tools and we need more funding for security audits.

[-] LammaLemma@lemmy.ca 12 points 1 year ago

Can someone explain why this is remarkable… or not.

[-] pennomi@lemmy.world 87 points 1 year ago

The source code seems to have some hardcoded credentials in there, essentially making this a back door. The git repo also seems to have Israeli surveillance roots to it, which is troubling for any sort of top secret data.

[-] topherclay@lemmy.world 27 points 1 year ago

If you read the blog post one day older than this one from before he got the code, he speaks more about the Israeli ties. The CEO for TeleMessage is former IDF.

https://micahflee.com/tm-sgnl-the-obscure-unofficial-signal-app-mike-waltz-uses-to-text-with-trump-officials/

I haven't spent a lot of time looking into TeleMessage, but what I did find at a quick glance is that several of the executives on the teams page list Israeli universities in their bios, and the CEO, Guy Levit, says that, "From 1996 until 1999, Guy served as the head of the planning and development of one of the IDF’s Intelligence elite technical units."

[-] Cethin@lemmy.zip 1 points 1 year ago

You've got to be more clear about serving in the IDF. Luckily your quote gives more detail, but literally every Israeli citizen has to serve in the IDF, so former service in the IDF doesn't mean much more than just saying they're Israeli.

[-] Maeve@kbin.earth 1 points 1 year ago

A short while back, there was an article about a Bibi leak where he was bragging they know the US admin plans and controlled them.

[-] LammaLemma@lemmy.ca 10 points 1 year ago

Thank you for making this make sense :)

[-] grue@lemmy.world 9 points 1 year ago

Why not just use the official signal app, if you're going to use it at all?

[-] jagged_circle@feddit.nl 4 points 1 year ago* (last edited 1 year ago)

Apparently archives.

I guess its a legal requirement for government and the financial sector.

I archive my signal chats. But, I guess, they need an automatic way to do that. They should ask their precious Grok or whatever tf it's called.

[-] jagged_circle@feddit.nl 2 points 1 year ago* (last edited 1 year ago)

Probably they need a way to archive it where the user can't enable or disable archiving

Yeah, that would make sense. But this is not the right use case for Signal at all. In fact (and I know I'm preaching to the choir), it defeats Signal's use case in many ways. I don't even know what they're trying to accomplish with this.

[-] possiblylinux127@lemmy.zip 5 points 1 year ago* (last edited 1 year ago)

Is there a secondary source that this is actually the app being used?

This whole thing seems very questionable

[-] Skydancer@pawb.social 5 points 1 year ago

Paywall bypass for the article's link on the hackers that exfiltrated message contents: https://archive.is/8kaQQ

[-] LiveLM@lemmy.zip 3 points 1 year ago

So that whole thing with the Signal group chat was done on some wacky fork on top of that??? Lmao

this post was submitted on 04 May 2025
237 points (99.2% liked)

Technology

7388 readers
102 users here now

News community around technology, social media platforms, information technology and governmental policy surrounding it.

What doesn't fit here?

The core of the story has to be technology focused.


Post guidelines

Title formatPost title should mirror the news source title. If you don't like the title of article, look for an alternative source instead of editorializing it.
URL formatPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
[Opinion] prefixOpinion (op-ed) articles must use [Opinion] prefix before the title. Opinion articles refer to articles that their publisher doesn't explictly endorse.
Country prefixCountry prefix can be added to the title with a separator (|, :, etc.) if the news is from a local publisher who doesn't clearly mention the country.


Rules

1. English onlyTitle and associated content has to be in English.
2. Use original linkPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
3. Respectful communicationAll communication has to be respectful of differing opinions, viewpoints, and experiences.
4. InclusivityEveryone is welcome here regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
5. Ad hominem attacksAny kind of personal attacks are expressly forbidden. If you can't argue your position without attacking a person's character, you already lost the argument.
6. Off-topic tangentsStay on topic. Keep it relevant.
7. Instance rules may applyIf something is not covered by community rules, but are against lemmy.zip instance rules, they will be enforced.


Companion communities

!globalnews@lemmy.zip
!interestingshare@lemmy.zip


Icon attribution | Banner attribution


If someone is interested in moderating this community, message @brikox@lemmy.zip.

founded 2 years ago
MODERATORS