Viber adds end-to-end encryption
techcrunch.com
Viber adds end-to-end encryption
1–10 of 114 posts
Re: Viber adds end-to-end encryption
#2Viber has become a shadow of its former self. It regularly crashes all phones in my family, you get message notifications way too late, and it takes up a ton of storage on your phone.
Re: Viber adds end-to-end encryption
#3Get news to see other services following in the footsteps of WhatsApp!
Re: Viber adds end-to-end encryption
#4More great news from the world of communication, but yet again I'm wondering how we can trust the encryption to really be end-to-end without access to the code. Are the messages still traveling through Vibers servers? Is there any way to know?
Re: Viber adds end-to-end encryption
#5"Along with the encryption, there are some other privacy features getting added into the latest version of the app. Hidden chats will give users the ability to essentially “hide” certain conversations from their usage log, accessible only if you know a specified four-digit PIN"
Can anyone with Viber describe what happens when you get a new message from a hidden chat partner? Does a notification show? how does that notification look?
Re: Viber adds end-to-end encryption
#6More great news from the world of communication, but yet again I'm wondering how we can trust the encryption to really be end-to-end without access to the code. Are the messages still traveling through Vibers servers? Is there any way to know?
"I'm wondering how we can trust the encryption"
You can't.
Not unless the company employees security experts, has a significant bug bounty program (with significant rewards), is open to a degree about their securit architecture, and is popular enough for white hats to actively seek out bugs.
This isn't about trusting that the company isn't try to dupe you. It's about trusting that the company can implement security properly, and that enough "good" people will find security flaws before the "bad" guys do.
Re: Viber adds end-to-end encryption
#7End-to-end (E2E) code needs to be open source and venders that don't agree to an audit should be considered insecure; holds true for What's App, which declined to allow their E2E code to be audited.
Also, message metadata is still being leaked by all of these E2E implementations and needs to be fixed.
Re: Viber adds end-to-end encryption
#8More great news from the world of communication, but yet again I'm wondering how we can trust the encryption to really be end-to-end without access to the code. Are the messages still traveling through Vibers servers? Is there any way to know?
"I'm wondering how we can trust the encryption" You can't. Not unless the company employees security experts, has a significant bug bounty program (with significant rewards), is open to a degree about their securit architecture, and is popular enough for white hats to actively seek out bugs. This isn't about trusting that the company isn't try to dupe you. It's about trusting that the company can implement security p…
You're both saying the same thing.
As for the good people vs. bad people argument, it should be noted that the good people have a harder job than the bad people. For the bad people to do their job, they only have to find one exploit, whereas the good people have to find most/all of them to have made the system secure. That's why employing people to work on security matters (whether through a bug bounty program or through direct employment), a company that values security shouldn't rely on unpaid volunteers alone.
Re: Viber adds end-to-end encryption
#9End-to-end (E2E) code needs to be open source and venders that don't agree to an audit should be considered insecure; holds true for What's App, which declined to allow their E2E code to be audited. Also, message metadata is still being leaked by all of these E2E implementations and needs to be fixed.
That's just an utterly ridiculous proposition.
By that logic the entire application would need to be open source, because nobody would start out by targeting the crypto if they wanted to spy on someone.
Re: Viber adds end-to-end encryption
#10End-to-end (E2E) code needs to be open source and venders that don't agree to an audit should be considered insecure; holds true for What's App, which declined to allow their E2E code to be audited. Also, message metadata is still being leaked by all of these E2E implementations and needs to be fixed.
That's just an utterly ridiculous proposition. By that logic the entire application would need to be open source, because nobody would start out by targeting the crypto if they wanted to spy on someone.
Ideally it would be possible to use third party clients to connect, and so anyone could use a fully open source solution if they wanted.