alt Hacker NewsYep: If your threat model includes an attack like this and you're not always on a VPN already, you're likely already compromised.
This is a neat demo, but it should not fundamentally alter the way that anyone is using Signal. Either it doesn't matter to you or you already have mitigations in place.
> If your threat model includes an attack like this
The problem is, nobody's threat model includes state level attackers, until one day it does.
Back when Ulbricht was publicly asking questions using an easily uncovered identity, he wasn't thinking that in a few years he'd have the full force of every relevant TLA in the US (and Five Eyes/14 Eyes) trying to track him down.