I'm disappointed that this article doesn't mention iMessage. From what I understand, it's end-to-end encrypted and Apple doesn't have a key.
Worried About the Privacy of Your Messages? Download Signal
91–100 of 247 posts
Re: Worried About the Privacy of Your Messages? Download Signal
#92I'm disappointed that this article doesn't mention iMessage. From what I understand, it's end-to-end encrypted and Apple doesn't have a key.
But we can't audit it because the source code is not available, which makes it a no-go for people that actually care about their privacy.
Re: Worried About the Privacy of Your Messages? Download Signal
#93Earlier quoted context omitted.
https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...
Thanks for that link. I'll go through the build process and play with the apk. But even if I wanted to build my own apk, and run it on my custom Android build, it would'nt work right? Because of the need for Google Play store? Verifiable builds are atleast a step in the right direction.
Why do you need the play store? You can install apk files without it just fine, if you have the appropriate dev options enabled in your phone.
Re: Worried About the Privacy of Your Messages? Download Signal
#94Earlier quoted context omitted.
Not only tag, but also get their identity and possibly use backdoors, because Signal is only on Google Play, which in order to access it requires a gazillion identifying data. Signal is a joke if your adversary is NSA and its likes. You cant run Signal unless you give up who you are, and that you are using it, and its not very difficult to analyze _when_ you receiveor send a message due to the Signal requiring google…
Most people only have the NSA as an adversary in the minimal sense that they're caught up in a very broad mass surveillance net. It's true that if you're a whistleblower with sensitive government information Signal is not a complete solution for you. But who cares? Almost nobody is in that situation, and people in that situation have access to other tools that actually do help. Your last sentence is extremely unfair…
> Almost nobody is in that situation
Almost everybody might be in that situation, because the NSA is not the only group that has access to the data they collect. They call it "parallel construction", where the NSA's "customers" like the DEA simply have to fill out a form[1] to get surveillance data, and promise to lie about the source in court.
[1] https://www.techdirt.com/articles/20140203/11143926078/paral...
Re: Worried About the Privacy of Your Messages? Download Signal
#95There are a lot of people on this thread crapping on Signal for its various flaws and downsides. It's nice to be smarter and more informed than everyone, but for the rest of us we really need advice about what we SHOULD do if we want a baseline amount of privacy from mass surveillance. I'm honestly asking here--I don't have the knowledge that many in this community do about the exact risk of Signal requiring Google P…
The Tox project is specifically designed to meet your usability requirements. There were also forks of Signal which fixed the privacy issues, however Moxie Marlinspike (the founder of Open Whisper Systems) ordered them to cease and desist.
however Moxie Marlinspike (the founder of Open Whisper Systems) ordered them to cease and desist
Would you be kind enough to provide links? I can't find any information about this claim via Google, and Signal is distributed under the GPLv3, which grants rights to fork and modify it: https://github.com/WhisperSystems/Signal-Android
Re: Worried About the Privacy of Your Messages? Download Signal
#96I'm worried about the freedom of dissenting opinion in civil society from surveillance, not the privacy of my messages. Privacy is something I would easily give up for such freedom. Signal seems to me to one tool in a large profile to maintain freedom of information dissemination and information gathering activity. It seems to me that speaking to a large number of people anonymously is not possible with any of the ex…
> I'm worried about the freedom of dissenting opinion in civil society from surveillance A good reason to support Wikileaks.
It was, back when WikiLeaks seemed to be politically independent. Now it's hard to tell whether I'd be supporting worthy efforts to promote free dissent, or whether I'd be supporting one man's (or a small group of people's) interest in influencing U.S. politics in ways I find objectionable.
I'm also not sure I see the connection between 'dissent' and the dissemination of stolen private emails.
I think I'll give to the ACLU instead.
Re: Worried About the Privacy of Your Messages? Download Signal
#97I still haven't been able to register to Signal. It always fails with "error establishing connection with server". Does anyone want to suggest how I could get this working?
I had this issue as well until I cleared the data/cache for my Google Play services app.
Re: Worried About the Privacy of Your Messages? Download Signal
#98Earlier quoted context omitted.
That's like saying there's a targeted campaign to ignore Skype because these articles don't mention it. You might like Wire, but it's not an app that people concerned with privacy should be using. They have done a bunch of shady things: 1. They lied about having end-to-end encryption in their app: http://www.pcworld.com/article/2855745/new-communications-ap... 2. They lied about being open source for years. 3. They l…
You can't list a bunch of serious claims like the audio can be reconstructed with no additional information. There was a feud between the Signal people and Wire, so there is a lot of false info trying to smear Wire. GIF searches are obviously going to use a 3rd party service, and nobody should expect some kind of anonymous encrypted channel for GIF searches. That's ridiculous. I've not seen any lying about being open…
> GIF searches are obviously going to use a 3rd party service, and nobody should expect some kind of anonymous encrypted channel for GIF searches. That's ridiculous.
GIF searches aren't being transmitted to a third party service, they're being transmitted directly to Wire in plaintext: https://github.com/wireapp/wire-android-sync-engine/blob/4d5...
There's tons of stuff like that which leaks in the app. They store your entire contact list server-side, your plaintext group membership, group info like plaintext group name and plaintext group avatar, etc etc.
> I've not seen any lying about being open source. They haven't released every piece of code, but I don't recall them ever claiming they did.
Since their launch several years ago, they've had a "feature" matrix on their website that lists Wire as being open source (and their competitors as not being open source). That was long before their recent "open source" announcement (which still isn't even fully open source). When pressed, they said it was because they used some open source libraries. That's really shady.
> I've never seen any crypto experts who have audited Wire and said there's anything wrong with their choices, and you supplied no links.
Here's one example I saw recently:
https://www.cs.jhu.edu/~cwright/oakland08.pdf
They're vulnerable:
https://github.com/wireapp/wire-audio-video-signaling/blob/c...
Even worse, they also apparently include plaintext RTP headers with audio level information in them.
Re: Worried About the Privacy of Your Messages? Download Signal
#99Earlier quoted context omitted.
The Tox project is specifically designed to meet your usability requirements. There were also forks of Signal which fixed the privacy issues, however Moxie Marlinspike (the founder of Open Whisper Systems) ordered them to cease and desist.
however Moxie Marlinspike (the founder of Open Whisper Systems) ordered them to cease and desist Would you be kind enough to provide links? I can't find any information about this claim via Google, and Signal is distributed under the GPLv3, which grants rights to fork and modify it: https://github.com/WhisperSystems/Signal-Android
Re: Worried About the Privacy of Your Messages? Download Signal
#100Earlier quoted context omitted.
That's like saying there's a targeted campaign to ignore Skype because these articles don't mention it. You might like Wire, but it's not an app that people concerned with privacy should be using. They have done a bunch of shady things: 1. They lied about having end-to-end encryption in their app: http://www.pcworld.com/article/2855745/new-communications-ap... 2. They lied about being open source for years. 3. They l…
You can't list a bunch of serious claims like the audio can be reconstructed with no additional information. There was a feud between the Signal people and Wire, so there is a lot of false info trying to smear Wire. GIF searches are obviously going to use a 3rd party service, and nobody should expect some kind of anonymous encrypted channel for GIF searches. That's ridiculous. I've not seen any lying about being open…
I thought the same as you about gif search until I saw what signal is planning for the feature: https://whispersystems.org/blog/giphy-experiment/
By proxying the encrypted request through another server, signal never sees the content of the request and giphy never gets the identity of the requester. I'm not sure that this is strictly necessary, but it certainly increases my confidence that the signal team are serious about their work.