Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TextSecure's Private Group Messaging

whispersystems.org

Post reply on HN
Print view View original

71–80 of 109 posts

Re: TextSecure's Private Group Messaging

#71

Post by jlund »

swaits wrote: post #67
moxie wrote: post #46

Earlier quoted context omitted.

> 1. What is TextSecure's business model? Who pays for the server infrastructure? It's a good question. TextSecure is not a business, so we don't really have a business model in the traditional sense. Open Whisper Systems is a collective project made up of volunteers and a growing number of contributors, who are sometimes paid by donations ( https://whispersystems.org/blog/bithub/ ) and grants. Thus far, we've been a…

I'd pay good money for an iOS version. I'm limping along with Threema now (which, functionally, is really great!). I'd pay even more good money for hosting to not be in Google's data centers.

An iOS version is in progress and should be released in the next few months [1].

The TextSecure servers are not hosted in Google's data centers. Google's GCM push messaging framework is used to deliver messages to Android users, but the GCM payloads are fully encrypted.

[1] https://github.com/WhisperSystems/TextSecure-iOS

Re: TextSecure's Private Group Messaging

#72

Post by jlund »

rdl wrote: post #69
swaits wrote: post #67

Earlier quoted context omitted.

I'd pay good money for an iOS version. I'm limping along with Threema now (which, functionally, is really great!). I'd pay even more good money for hosting to not be in Google's data centers.

I'd actually like a Chrome browser extension version, too (yes, I recognize the vulnerabilities vs. a true native client, but signed browser extensions mitigate a lot of those)

This is already in progress [1].

[1] https://github.com/TheBlueMatt/textsecure-chrome

Re: TextSecure's Private Group Messaging

#73

Post by jlund »

higherpurpose wrote: post #58
moxie wrote: post #46

Earlier quoted context omitted.

> 1. What is TextSecure's business model? Who pays for the server infrastructure? It's a good question. TextSecure is not a business, so we don't really have a business model in the traditional sense. Open Whisper Systems is a collective project made up of volunteers and a growing number of contributors, who are sometimes paid by donations ( https://whispersystems.org/blog/bithub/ ) and grants. Thus far, we've been a…

What's the relation between the server and the SMS verification when setting up the app? I haven't tried TextSecure in a while, but when I tried right after you announced TextSecure v2, I kept getting failure to send me the SMS, and I had to receive the robo-call. I had a friend from another country who experienced the same. Is that still a problem?

There were some capacity issues when the new version of TextSecure was first released. The SMS code is used to verify ownership of a number before it can be used for Push messaging.

Re: TextSecure's Private Group Messaging

#74

Post by jlund »

phaer wrote: post #18
codelike wrote: post #11

I'm a big fan of TextSecure and recommended it to all my friends, both those in IT and 'normal' people. Usually, I managed to convince them that the open source nature of TextSecure and the crypto experts behind it (e.g. Moxie) make it more secure than Threema/... . However, the more sceptical ones among my friends always asked two questions, which I didn't have a good answer for: 1. What is TextSecure's business mod…

Afaik TextSecures server infrastructure consists mainly of Google Play Services which comes at no financial costs for them but with the downside of depending on Google to temporary store encrypted text.

This isn't entirely true. A detailed explanation is available in the Open WhisperSystems Support Center [1] and several solutions are in the works. Google's GCM push messaging framework is used only for message delivery; the TextSecure server itself is open source [2].

[1] http://support.whispersystems.org/customer/portal/articles/1... [2] https://github.com/WhisperSystems/TextSecure-Server

Re: TextSecure's Private Group Messaging

#75

Post by swaits »

jlund wrote: post #71
swaits wrote: post #67

Earlier quoted context omitted.

I'd pay good money for an iOS version. I'm limping along with Threema now (which, functionally, is really great!). I'd pay even more good money for hosting to not be in Google's data centers.

An iOS version is in progress and should be released in the next few months [1]. The TextSecure servers are not hosted in Google's data centers. Google's GCM push messaging framework is used to deliver messages to Android users, but the GCM payloads are fully encrypted. [1] https://github.com/WhisperSystems/TextSecure-iOS

I know it's in progress. I'm anxiously waiting. If you tell me where I can send $ or BTC to help it go faster, I'll gladly oblige.

Re: TextSecure's Private Group Messaging

#76

Post by jevinskie »

xyzzy123 wrote: post #38
makomk wrote: post #36

Earlier quoted context omitted.

Yeah. The more substantial downside is that Google effectively has remote root access to every device which holds decryption keys for that text. That's not exactly ideal.

I would be interested in your thoughts on alternative platforms / firmware /ecosystems which get around this?

Perhaps using Paranoid Android (if supported on your phone) would be a start.

Re: TextSecure's Private Group Messaging

#77

Post by liliakai »

zokier wrote: post #45

I wished moxie would have discussed more the group management aspects. > Anyone can create a group, name it, give it an avatar icon, add members, and then everyone can chat together with a normal asynchronous experience. Does this mean that any group member can add more members? Are there any IRC-like moderation features (even planned?), eg. privileged members who can remove users from group? Is there support for per…

TextSecure groups are fully egalitarian. Anyone may add members and no one may force an existing member to leave. There are no privileged members.

A group conversation persists locally on your own device unless you delete it, just like a normal conversation. The server does not store any records representing the group, so there's nothing to persist beyond the clients.

There is no plan to change these properties, afaik.

Re: TextSecure's Private Group Messaging

#78

Post by whyever »

swaits wrote: post #75
jlund wrote: post #71

Earlier quoted context omitted.

An iOS version is in progress and should be released in the next few months [1]. The TextSecure servers are not hosted in Google's data centers. Google's GCM push messaging framework is used to deliver messages to Android users, but the GCM payloads are fully encrypted. [1] https://github.com/WhisperSystems/TextSecure-iOS

I know it's in progress. I'm anxiously waiting. If you tell me where I can send $ or BTC to help it go faster, I'll gladly oblige.

See [1] for donating BTC and [2] for donating other currencies through the Freedom of the Press Foundation.

[1] https://whispersystems.org/blog/bithub/

[2] https://pressfreedomfoundation.org/

Re: TextSecure's Private Group Messaging

#79

Post by droopyEyelids »

higherpurpose wrote: post #60
phaer wrote: post #54

Earlier quoted context omitted.

I see you point but it should not weaken the security because encryption happens at the client, Google "only" gets metadata which at least authorities will get anyway. Besides, TextSecure is free software so it might possible to run your own server at least in the future.

Google gets the metadata? That's news to me. I thought the metadata was encrypted by the TextSecure server?

Every network that carries your communication gets the metadata.

In this case, it seems like that metadata would 'just' be the time you sent and received messages from the server. Depending on how Google's push protocol works.

So for the average person that would be fine, but if you were seriously annoying a government that was in bed with your phone company, they could probably figure out who was a part of your cell by the timing of your sent and received messages.

Re: TextSecure's Private Group Messaging

#80

Post by scl_md »

tptacek wrote: post #66
kaeporan wrote: post #65

Earlier quoted context omitted.

Since you've asked me not to share contents of private emails, I won't. But your insistence on assuming bad faith on my part and rudely rejecting any conflict resolution from my end is deplorable, and you should be ashamed of how baselessly aggressive you have been towards me. You consistently spin everything I say and respond to my attempts to be constructive by encouraging groupthink against what I'm trying to say…

The private emails you're referring to include: * Requesting the crypto challenges and receiving some of them. * Repeatedly asking me to talk to you privately, which, as you've acknowledged here in the least charitable way possible, I refuse to do. I respond to these requests simply and directly, without insult or explanation. That's the extent of our correspondence. As any reader of this thread can see, you and your…

a question. which application should I use if I have an iphone? (and do not want to change the iphone) what program would you recommend? thank you very much
Post reply on HN