About backdoors in crypto messengers
blogs.fsfe.org
About backdoors in crypto messengers
1–10 of 71 posts
Re: About backdoors in crypto messengers
#2Blog seems to be down, and cannot find a cached version in Google :(
Re: About backdoors in crypto messengers
#3Blog seems to be down, and cannot find a cached version in Google :(
http://webcache.googleusercontent.com/search?q=cache:OSLZXIu... works for me (better use text only version as Google tries to load css from the server apparently)
Re: About backdoors in crypto messengers
#4If you're considering Google an adversary, perhaps you shouldn't use stock Android, or any of their software.
If you're considering Google an adversary, and use a version of Android without Google support, you can't use Signal anyway.
Re: About backdoors in crypto messengers
#5It seems that if you really want proper secure channel you need to write one yourself. Anything out there is subject to being compromised.
Is there open source alternative for Signal?
Re: About backdoors in crypto messengers
#6>tl;dr: There is a “backdoor” in Signal nobody cares about, only Google can use it.
Speak for yourself. This backdoor is the reason why I don't use Signal.
Re: About backdoors in crypto messengers
#7It seems that if you really want proper secure channel you need to write one yourself. Anything out there is subject to being compromised. Is there open source alternative for Signal?
from the article: XMPP
Re: About backdoors in crypto messengers
#8The backdoor referred to can be applied to any Android app that uses Google Maps. Also mentioned is that using the built-in Google keyboard is a vulnerability, because in theory it gives Google the ability to keylog you.
I supposed this boils down to knowing your adversaries. If you number Google amongst that list, life is going to be really difficult - no matter who you are.
Re: About backdoors in crypto messengers
#9It seems that if you really want proper secure channel you need to write one yourself. Anything out there is subject to being compromised. Is there open source alternative for Signal?
You don't have to look far. The actual Signal client source is licensed under GPLv3.
Edit: And server code under AGPLv3.
Re: About backdoors in crypto messengers
#10If you're considering Google an adversary, perhaps you shouldn't use stock Android, or any of their software. If you're considering Google an adversary, and use a version of Android without Google support, you can't use Signal anyway.
Actually, it is possible to use Signal on Android without Google using the opensource microG and Xposed framework (setup is a bit involved...but you can google that :P for a guide).