This talk delves into the "Signalgate Saga," exposing a series of staggering security failures and incompetence within the Trump administration concerning secure communications. Beginning with the accidental inclusion of a journalist in a Signal group where classified war plans were shared, the narrative escalates through officials lying to Congress about discussing classified information. The administration's subsequent shift to "TMSGNL," a modified Signal application by the Israeli company Tele Message (founded by ex-intelligence agents), introduced even greater vulnerabilities.
The speaker, Mike Lee, a security researcher and journalist, details his investigation into Tele Message's practices. His analysis revealed that TMSGNL, despite claims, did not provide end-to-end encryption, instead archiving all messages (including those from WhatsApp, Telegram, and Signal) in plain text on its servers. Critically, he uncovered severe security flaws in Tele Message's infrastructure, including hard-coded credentials in the app's source code and a publicly exposed Java heap dump endpoint on their archive server. These vulnerabilities were trivially exploited by hackers, leading to massive data breaches containing sensitive information from numerous US government agencies (e.g., US Customs and Border Protection, Secret Service, White House staff) and private entities. The leaked data included internal government communications, political lobbying discussions, and private family chats, highlighting a profound national security threat and operational security negligence. Senator Ron Wyden subsequently called for a Justice Department investigation into Tele Message and its potential ties to the Israeli government.
The Signalgate Saga: A Chronicle of Incompetence and Compromised Communications
0:09 Introduction to Signalgate: Mike Lee, an independent security researcher and journalist, introduces the "Signalgate Saga," a story of "unbelievable incompetence" within the Trump administration regarding secure communications.
0:22 Accidental Journalist Inclusion: Mike Waltz, Trump's National Security Adviser, inadvertently added journalist Jeffrey Goldberg to a Signal group intended for senior officials, including the Secretary of Defense and CIA Director.
0:55 Classified War Plans Leaked: Pete Hegseth, then Secretary of Defense, posted detailed war plans for a drone strike in Yemen to this Signal group, including F-18 launch times and bomb drop schedules. This attack later resulted in 53 deaths, including civilians.
0:30 Officials Lie to Congress: Tulsi Gabbard and John Ratcliffe, along with Pete Hegseth, testified under oath to Congress, falsely claiming no classified information was discussed in the Signal group, despite later evidence.
0:47 Further OPSEC Failures: Hegseth also shared the war plans with his wife, brother, and personal lawyer in a separate Signal group, ironically claiming to be "clean on OPSAC."
0:10:01 The Siri Blame: A White House investigation concluded that Goldberg's phone number was added to a contact card via an erroneous Siri update, leading Waltz to mistakenly invite him – a failure attributed to using personal devices for sensitive communications.
0:11:25 Shift to Tele Message (TMSGNL): Mike Waltz was later photographed using "TM SGNL," a modified Signal application by Tele Message, an Israeli company founded by former IDF intelligence.
0:13:50 Tele Message's Deceptive Security: Tele Message's marketing falsely advertised end-to-end encryption. Lee's analysis revealed the app archived all messages (from various platforms like WhatsApp and Telegram, not just Signal) in plain text to customer-controlled servers.
0:16:46 Critical App Vulnerabilities: Lee discovered hard-coded WordPress credentials in TMSGNL's Android source code and noted the iOS version likely violated Signal's open-source license.
0:17:37 Tele Message Server Hacked: An anonymous hacker easily exploited a "trivial vulnerability" – an exposed Java heap dump endpoint on Tele Message's server – gaining access to usernames, passwords, and plain text chat logs, including US Customs and Border Protection administrative panels and cryptocurrency firm communications.
0:26:16 Massive Data Breach: Distributed Denial of Secrets released hundreds of gigabytes of hacked heap dumps, exposing over 60 US government users (including Secret Service and a White House staffer) and messages dating back to 2022, indicating long-term data retention by Tele Message.
0:32:05 "Tele Explorer" for Data Analysis: Lee developed an open-source tool called "Tele Explorer" to navigate and analyze the vast, incomplete data set, which showed most archived messages were from WhatsApp and Telegram.
0:33:13 Key Discoveries in Leaked Data: The data revealed messages concerning a Trump visit to the Vatican, communications in Chinese and Hebrew (including an IDF-related message), lobbying discussions involving OpenAI CEO Sam Altman, and Jared Kushner exchanging sketchy messages about the UAE with a White House AI adviser, as well as his private family group chat being accessible.
0:37:35 National Security Implications: Senator Ron Wyden demanded a Justice Department investigation into Tele Message's dangerously insecure software and the possibility of US government communications being shared with the Israeli government, concluding the saga as a severe national security threat stemming from "unbelievable incompetence."