Live data from Hacker News

Free, Worldwide, Encrypted Phone Calls for iPhone

whispersystems.org

181–190 of 211 posts

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#181

Nice try, but pointless and snake oil, since the iPhone is not a secure device. Try building a secure device that users "own" first, then spend effort on building secure services on top.

Nice idea, but in the real world you need to create a service that people "use" first, then spend effort on building a secure device.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#182
post #92
post #3

It's great that we have more privacy options for phone calls, texts, etc. But we still need a great "Privacy" phone, right? There's been attempts to do so recently (Blackphone, PrivacyPhone), but both have suffered from the same fault: a binary blob for the baseband, something that renders all your privacy moot. I've heard the best recommendation is a tablet + USB LTE dongle, to put some space between the two process…

"I've heard the best recommendation is a tablet + USB LTE dongle, to put some space between the two processors " This is an interesting, and tempting, direction to go in ... my understanding is that this is problematic, however. You see, in addition to all of the (radio stuff) that the baseband processor handles, it turns out that they also handle a lot of voice quality functions, such as noise cancel, echo cancel, i…

The open source PJSIP (which I do have first hand experience of) has echo cancel and some noise cancellation. It's not cutting edge but it works fine in practice. You might not get quite the quality of Skype but better than plain old landline telephone service.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#183
post #181

Nice try, but pointless and snake oil, since the iPhone is not a secure device. Try building a secure device that users "own" first, then spend effort on building secure services on top.

Nice idea, but in the real world you need to create a service that people "use" first, then spend effort on building a secure device.

Noone's ever going to build a secure device if people are fed such snake oil and given the impression that they have "some" or "enough" security if they use it.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#184
post #181

Earlier quoted context omitted.

Nice idea, but in the real world you need to create a service that people "use" first, then spend effort on building a secure device.

Noone's ever going to build a secure device if people are fed such snake oil and given the impression that they have "some" or "enough" security if they use it.

Security works in layers, and unfortunately consumers want the wrong layer first.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#185
post #184

Earlier quoted context omitted.

Noone's ever going to build a secure device if people are fed such snake oil and given the impression that they have "some" or "enough" security if they use it.

Security works in layers, and unfortunately consumers want the wrong layer first.

The point is, they get 0 security and we should not pretend that they are getting more. We are ripping off consumers if we do, what we think they want is a poor excuse, unless we're just in it for the money/fame/other benefits.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#186
post #179

Earlier quoted context omitted.

I could compile the source for iPhone (well someone could I have no idea. Probably some SDK). Then compare hashes.

Actually you cannot. Rebuilding from the same source almost never yield identical binaries.

Actually you could. They are called "deterministic builds".

But this would require some kind of effort from project maintainers.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#187
post #177
post #158

Earlier quoted context omitted.

Why is it so hard to find cross-platform, encrypted group chat? Surely there's a market for it.

if mobile/tablet-only is OK, try wickr (wickr.com). It works fairly well for me. They have a $100.000 bounty for someone who manages to break their code/get communication contents and they're sponsored by the EFF. The downsides are that it's closed-source and that there's no desktop client (yet).

Threema also has group chat functionality

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#188

Nice try, but pointless and snake oil, since the iPhone is not a secure device. Try building a secure device that users "own" first, then spend effort on building secure services on top.

Software like this is about making mass surveillance more expensive. If you have a backdoor or a remote exploit for a phone, you might still be able to wiretap somebody, but at least all data on the network is encrypted.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#189
post #158

Please authenticate with something that's not a phone number! I guess that's the simplest for most people (look at WhatsApp), but the reason why I use things like Signal is because I despise cell carriers. I'd like to use this on a (cheaper) non-cellular device (for myself and family members). The Holy Grail of Secure Communications: Group Encrypted Text, Voice, and Video. Right now, Skype gives you the unholy grail,…

Why is it so hard to find cross-platform, encrypted group chat? Surely there's a market for it.

The announcement here says that Signal will support text messaging compatible with TextSecure later in the summer.

I've been using TextSecure on android for some time, group chat is part of it.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#190
post #89
post #10

Earlier quoted context omitted.

We're going to need verifiable sources for claims like that.

"We're going to need verifiable sources for claims like that." This entire parent+thread argument back and forth is completely absurd. It doesn't matter whether he has sources. It doesn't matter whether that firm does or does not exist. It doesn't matter what you think of their tech or his explanation or who is who or what is what. Your phone has two[1] completely independent, full-featured computers inside of it, to…

>> Whisper systems does not solve this. SecurePhoneBlahBlah does not solve this.

1. The SIM chip generally is not a full featured computer and I'm unsure that it would have DMA access. But yes the baseband processor is indeed an issue.

2. Products like this prevent the kind of passive data-slurping that has been popular so far - i.e. install a box at the telco and record everything. That's a good start.

So yes, it does matter and it's a good start, and it pushes up costs for pervasive surveillance.

Post reply on HN