Live data from Hacker News

Free, Worldwide, Encrypted Phone Calls for iPhone

whispersystems.org

11–20 of 211 posts

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#11
post #4

Um. Isn't encrypted calling on iPhones already provided by FaceTime Audio?

They claim to use SIP to establish an SRTP connection with AES-256. But I don't know any way to verify that the data is being encrypted well or sent only to the intended recipient. https://ssl.apple.com/iphone/business/docs/iOS_Security_Feb1...

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#12
post #3

It's great that we have more privacy options for phone calls, texts, etc. But we still need a great "Privacy" phone, right? There's been attempts to do so recently (Blackphone, PrivacyPhone), but both have suffered from the same fault: a binary blob for the baseband, something that renders all your privacy moot. I've heard the best recommendation is a tablet + USB LTE dongle, to put some space between the two process…

you are mixing things up. Privacy and Opensource. For a true open source project look at http://www.replicant.us/ And regarding privacy: Use SIM cards which do not require an ID and which you can throw away ;) but this is only the first step.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#13
post #6

Many people are already familiar with Moxie Marlinspike's WhisperSystems because of their Android apps: RedPhone for encrypted calls, and TextSecure for SMS messages. The release of Signal is a pretty big deal for iOS users; previously, we had to consider a paid option like Silent Circle, or a larger corporate option like FaceTime Audio (which isn't really the same). Although I haven't actually used the app yet (it's…

[deleted]

Is there any way you can substantiate any of this? I wouldn't be shocked, but it seems borderline implausible that we'd be getting all this interest in various ways to hack into iPhones physically if you could just dial a number--and I think it also goes without saying that, whether Apple provides official backdoors or no, it has a high interest in ensuring that there aren't any unofficial backdoors for many other reasons (preserving DRM for one example, if you need them to have a selfish motivation).

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#14
post #13
post #6

Earlier quoted context omitted.

[deleted]

Is there any way you can substantiate any of this? I wouldn't be shocked, but it seems borderline implausible that we'd be getting all this interest in various ways to hack into iPhones physically if you could just dial a number--and I think it also goes without saying that, whether Apple provides official backdoors or no, it has a high interest in ensuring that there aren't any unofficial backdoors for many other re…

[deleted]

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#16
post #6

Many people are already familiar with Moxie Marlinspike's WhisperSystems because of their Android apps: RedPhone for encrypted calls, and TextSecure for SMS messages. The release of Signal is a pretty big deal for iOS users; previously, we had to consider a paid option like Silent Circle, or a larger corporate option like FaceTime Audio (which isn't really the same). Although I haven't actually used the app yet (it's…

[deleted]

[deleted]

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#18
post #6

Many people are already familiar with Moxie Marlinspike's WhisperSystems because of their Android apps: RedPhone for encrypted calls, and TextSecure for SMS messages. The release of Signal is a pretty big deal for iOS users; previously, we had to consider a paid option like Silent Circle, or a larger corporate option like FaceTime Audio (which isn't really the same). Although I haven't actually used the app yet (it's…

[deleted]

That will always remain an issue: Even if someone manages to create a secure app, the software and hardware platform will never be secure.

Hijacking a smartphone by only knowing its number on the other hand does not seem realistic too me. So a source for this claim would be great …

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#19
post #3

It's great that we have more privacy options for phone calls, texts, etc. But we still need a great "Privacy" phone, right? There's been attempts to do so recently (Blackphone, PrivacyPhone), but both have suffered from the same fault: a binary blob for the baseband, something that renders all your privacy moot. I've heard the best recommendation is a tablet + USB LTE dongle, to put some space between the two process…

you are mixing things up. Privacy and Opensource. For a true open source project look at http://www.replicant.us/ And regarding privacy: Use SIM cards which do not require an ID and which you can throw away ;) but this is only the first step.

Privacy and Open Source can be the same thing -- the idea being that if we know how something was built, we can make sure there aren't any backdoors / "hidden" features that we don't know about. Most if not all of the open source operating systems still include a binary baseband blob, although work is progressing on a few (the best one I saw only worked on really, really old phones).

One of the main criticisms of the Blackphone was that A) PrivacyOS (I think it was called) was seemingly black box (no pun intended) -- they said they would open up the code soon, but we haven't seen anything yet B) It still would use a binary baseband. The illusion of security is sometimes worse than no security, and open source code helps with removing those barriers (Although it doesn't neccesarily -- just look at OpenSSL).

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#20
post #4

Um. Isn't encrypted calling on iPhones already provided by FaceTime Audio?

I'm sure there is no real end-to-end encryption. And you can only do that between iPhone/Mac users.

> I'm sure there is no real end-to-end encryption.

"The audio/video contents of FaceTime calls are protected by end-to-end encryption, so no one but the sender and receiver can access them. Apple cannot decrypt the data."

https://ssl.apple.com/iphone/business/docs/iOS_Security_Feb1...

> And you can only do that between iPhone/Mac users.

Ah yeah, I thought Signal was only for iPhone, based on the title. Should have read the first paragraph more closely.

Post reply on HN