Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WhatsApp's Signal Protocol integration is now complete

whispersystems.org

Post reply on HN
Print view View original

381–386 of 386 posts

Re: WhatsApp's Signal Protocol integration is now complete

#381

Post by nickik »

nxzero wrote: post #379
nickik wrote: post #212

Earlier quoted context omitted.

Its still their own crypto. Even if you have the code, their could be a mathematical weakness that is unknwon to anybody outside the company. The protocol has not been studied a lot.

Has anyone offer to fund an audit of the code/crypto/workflow? If not, it'd be nice Moxie would spec out a public request for funds via some sort of crowdfunding and means to post public offers to audit the code based on the funds raised.

Moxie has asked them multible times but they dont seem to care.

Re: WhatsApp's Signal Protocol integration is now complete

#382

Post by [deleted] »

nickik wrote: post #381
nxzero wrote: post #379

Earlier quoted context omitted.

Has anyone offer to fund an audit of the code/crypto/workflow? If not, it'd be nice Moxie would spec out a public request for funds via some sort of crowdfunding and means to post public offers to audit the code based on the funds raised.

Moxie has asked them multible times but they dont seem to care.

[deleted]

Re: WhatsApp's Signal Protocol integration is now complete

#383

Post by nxzero »

nickik wrote: post #381
nxzero wrote: post #379

Earlier quoted context omitted.

Has anyone offer to fund an audit of the code/crypto/workflow? If not, it'd be nice Moxie would spec out a public request for funds via some sort of crowdfunding and means to post public offers to audit the code based on the funds raised.

Moxie has asked them multible times but they dont seem to care.

Oh, interesting, not a huge suprise, though guess I wasn't clear, I was talking about auditing the open source stuff, not Facebook.

Basically, crowdfunded audits of open source crypto tech have been done before; I'd be up for helping with this if it made sense, since currently my sec dev skill are not that useful:

https://www.indiegogo.com/projects/the-truecrypt-audit#/

--

Might be worth funding a exploitable bug bounty too.

Re: WhatsApp's Signal Protocol integration is now complete

#384

Post by tptacek »

ComodoHacker wrote: post #380
wglb wrote: post #347

Earlier quoted context omitted.

Here is one reference: https://en.wikipedia.org/wiki/Cryptocat . Additional googling will show more.

Well I asked because googling showed me very little. Basically Greenwald and Snowden used Cryptocat during some online interview.

Is there something more you're looking for?

Re: WhatsApp's Signal Protocol integration is now complete

#386

Post by tommorris »

lmm wrote: post #339
Mafana0 wrote: post #195

Earlier quoted context omitted.

> It's a shame to see key words be killed off by internationalisation concerns. I think it's actually a solid decision from WhatsApp since the majority of their users are from non English speaking countries[0]. [0]: http://www.statista.com/statistics/291540/mobile-internet-us...

The question isn't really what country they're from though. How many of those users can't speak English?

Quite a lot.

One example: WhatsApp is one of the primary messaging services used in Brazil, with something like half the population using it. The vast majority of which don't speak any languages other than Portuguese.

When the courts in Brazil shut down WhatsApp for 48 hours, there was a huge outcry because it is THE primary means of communication for people, especially to talk to family who have gone abroad.

Post reply on HN