21–30 of 173 posts
Is it really surprising that he would have all of the most popular messaging apps? Facebook’s playbook of copying popular features from apps gaining traction is by no means a secret. I’m not totally convinced by the narrative that Mark doesn’t trust his own tools so he prefers Signal.
Yeah, it is likely that he was just checking up on the competition. I wouldn't be surprised if turned the narrative on this by saying something like the following: "I was curious to check it out.. it wasn't very good, so I reverted back to Messenger/Whatsapp." IIRC, he made similar comments when he was spotted using G+. Disclaimer: My views are my own (and not necessarily shared by my employers).
I will take this moment also to mention that "re-implement" isn't exactly right in that they modified the protocol slightly to allow for someone in control of the administration server to change a user's private key without their knowing, so that the admin can decrypt the E2E communications using the known key.
Earlier quoted context omitted.
Has it been audited by external, independent security researchers?
Yes, it's open source and anyone can look at the source code instead of appealing to authority.
Has it been audited by security researchers?
Earlier quoted context omitted.
Yes, it's open source and anyone can look at the source code instead of appealing to authority.
That's not what I asked. Generally laypeople are not going to be good judges of whether or not an encryption protocol is sufficiently secure. Has it been audited by security researchers ?
Earlier quoted context omitted.
That's not what I asked. Generally laypeople are not going to be good judges of whether or not an encryption protocol is sufficiently secure. Has it been audited by security researchers ?
You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? To answer your question, I don't know if Wire's been audited by paid researchers. I personally prefer a customer-exposed product whose each commit you can look up rather than the remote promise of security in a locked and hidden program.
Bitwarden is open-source (both the server and clients) AND has been independently audited for a security review.
Earlier quoted context omitted.
How so? I don't find it violating in any way that someone knows that I'm using a messenging app due to my phone number. They aren't exactly private in the first place. It would be the same if there were usernames, although those would be far harder to assign to a person. Thankfully, Signal is working on that feature and hopefully it's released soon. I'd like to one day not have any phone number at all. It's a system…
https://app.wire.com already has that feature and it is based on signal protocol.
These days you need basically all the message apps anyway unless your circle of friends is super homogenous
Isn’t a bit of a privacy flaw that signal exposes who uses the app by phone number?
It is. Its also a security issue - Phone numbers aren't unique. It was interesting seeing signal say my deceased father was 'on signal', it's just the same number recycled to someone else.
These days you need basically all the message apps anyway unless your circle of friends is super homogenous
I mean, I think it would be reasonable for Zuckerberg's friends to assume that he wouldn't want to use a competing product? Nobody would be offended if the CEO of Coca-Cola declined a can of pepsi.