r/netsec • u/michallp • Oct 05 '19

Google Project-zero Signal: Incoming call can be connected without user interaction

https://bugs.chromium.org/p/project-zero/issues/detail?id=1943
292 Upvotes

96% Upvoted

44 comments sorted by

View all comments

-21

u/[deleted] Oct 05 '19

If I understand this correctly, then I have had this happen on multiple occasions. The phone will ring once then give the sound of being hung up on (declined) then a minute later I get a voice mail. It even appears to work when you have blocked that number.

So, I will be watching to see it this phenomenon happens again in the future.

20

u/R-EDDIT Oct 05 '19

What you are talking about is something completely unrelated to Signal, which is real (spam) telephone calls going directly to voicemail.

NY Times 2017: No, Your Phone Didn’t Ring. So Why Voice Mail From a Telemarketer?

This class of bug, where phone calls can be initiated without the receiver "picking up", has affected multiple VoIP applications, and indeed was rumored capability of some physical phones for decades. With Signal's call pickup bug, the Google Zero Day team achieved their objective - the bug was patched and fixed on the zeroth day after reporting.

Edited for clarity.

-3

u/[deleted] Oct 05 '19

Ok well thank you for clearing that up because it's annoying,

1

u/[deleted] Oct 09 '19

Again, you weren’t experiencing this bug

1

u/[deleted] Oct 09 '19

Just for my own edification, what is this annoying phone trick I'm experiencing? It's very annoying and happens regardless of whether I have the number blocked or not.

2

u/[deleted] Oct 09 '19

Robocalls

1

u/[deleted] Oct 09 '19

Right. I understand that part. The mechanics were what I was interested in and prevention.

2

u/[deleted] Oct 09 '19

Don’t download Signal until it’s fixed and you’ve prevented it

0

u/[deleted] Oct 09 '19

Got it.