Live data from Hacker News

Free, Worldwide, Encrypted Phone Calls for iPhone

whispersystems.org

191–200 of 211 posts

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#191
post #15

Why is Signal (the app) free? What's the business model?

There isn't a business model. Not everything has to have a business model.

The only business model I would even remotely associate with this is, on an individual developer level, the reputation and future work opportunities you would get from having your name associated with this stuff.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#192
post #77

Earlier quoted context omitted.

Open source. Donations. https://pressfreedomfoundation.org/bundle/encryption-tools-j...

Donations is not a business model.

You can downvote all you want, but you are missing the point.

Is Whisper Systems a charity, non-profit or a commercial entity? If it's either of first two, then it would've only make sense to say just that in the About section, because it would alleviate all questions of why their products are free. However if it's a commercial entity, the question remains - how do they plan on making money? And donations is a silly answer. They are a nice bonus, but as any goodwill gestures they are an unsustainable and unpredictable source of money unless there are dedicated people managing it, e.g. organizing fundraisers, campaigns and such. I don't think WS is doing any of this.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#194
post #188

Nice try, but pointless and snake oil, since the iPhone is not a secure device. Try building a secure device that users "own" first, then spend effort on building secure services on top.

Software like this is about making mass surveillance more expensive. If you have a backdoor or a remote exploit for a phone, you might still be able to wiretap somebody, but at least all data on the network is encrypted.

Apparently I'm fighting windmills here, but encryption does not work on compromised devices. It will be sabotaged and rendered ineffective. Google for DROPOUTJEEP, what makes you think you can keep the encryption code safe from manipulation?

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#195

Earlier quoted context omitted.

You missed the main holy grail requirement: open source. Nothing closed source can be trusted.

How do you know that the app published on the App Store is the same one you have the source code for? Can't I can just give you some source code then release something else entirely?

The way it's usually done is you publish your

A) exact compilation settings

B) hash checksums for everything, including the resulting binaries

You probably can't do this on iOS, but on Android you can have a third party app monitoring the changes, or simply disabling the automatic updates altogether.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#196
post #186
post #179

Earlier quoted context omitted.

Actually you cannot. Rebuilding from the same source almost never yield identical binaries.

Actually you could . They are called "deterministic builds". But this would require some kind of effort from project maintainers.

I'm quite unknowledgeable about this, but from what little I understand: That is actually a very major effort in many cases, isn't it?

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#198
post #186
post #179

Earlier quoted context omitted.

Actually you cannot. Rebuilding from the same source almost never yield identical binaries.

Actually you could . They are called "deterministic builds". But this would require some kind of effort from project maintainers.

You cannot do that for iOS binaries, because they are signed by Apple before publishing on the Store (and so the hash will change).

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#199

Please authenticate with something that's not a phone number! I guess that's the simplest for most people (look at WhatsApp), but the reason why I use things like Signal is because I despise cell carriers. I'd like to use this on a (cheaper) non-cellular device (for myself and family members). The Holy Grail of Secure Communications: Group Encrypted Text, Voice, and Video. Right now, Skype gives you the unholy grail,…

I agree with that but to bring encryption close to end-users you will have to use something that's simple and everybody has. Said that, I'm aware of the disadvantages - they should provide an alternative to the phone number too.

Re: Free, Worldwide, Encrypted Phone Calls for iPhone

#200

Hey, I'm the co-lead developer of Signal. We're looking for help with translations, help us out to bring Signal to as many people as possible: https://www.transifex.com/projects/p/signal-ios/ We also pay per commit if you want to help on Open Whisper Systems projects: http://bithub.whispersystems.org/

If you approve russian translation request, I'll be happy to help

I can help with Russian as well.
Post reply on HN