Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Coder Who Encrypted Your Texts

wsj.com

Post reply on HN
Print view View original

21–30 of 191 posts

Re: The Coder Who Encrypted Your Texts

#24

Post by abalone »

I've had a ton of respect for Marlinspike ever since he published sslstrip, an incredibly simple defeat of HTTPS.[1]

It's a perfect demonstration of the fundamental insecurity of the web thus far. When an insecure communication mode (HTTP) is the default and perfectly ok most of the time, the browser has no idea when you are supposed to be operating on a secure channel (HTTPS) but have been tricked into downgrading by a man in the middle attack.

I can't prove it but I believe his work is a significant factor behind the shift towards deprecating HTTP in favor of HTTPS all the time. That is the only real solution.

[1] http://www.thoughtcrime.org/software/sslstrip/

Re: The Coder Who Encrypted Your Texts

#25

Post by tedunangst »

tw04 wrote: post #20
moxie wrote: post #5

I get a lot of credit for the stuff that Open Whisper Systems does, but it's not all me by a long shot. Trevor Perrin, Frederic Jacobs, Christine Corbett, Tyler Reinhard, Lilia Kai, Jake McGinty, and Rhodey Orbits are the crew that really made all this work happen.

Given that we have the man himself onboard - can I urge you to ask the WSJ to remove the comment at the start of the article about WhatsApp implementing your encryption schema? Unless I've missed something, there's absolutely no way for an end-user to determine if their messages are being encrypted (with whatsapp). Or how they're being encrypted for that matter. I feel like WhatsApp latched onto your groundwork (pote…

Start with the linked reddit comment? https://www.reddit.com/r/Android/comments/34ecja/the_heise_s...

Re: The Coder Who Encrypted Your Texts

#26

Post by btczeus »

iamthebest wrote: post #16

I tried installing TextSecure recently but it wouldn't work without the Google Play services. I hadn't herd of their new app Signal. Has anyone tried it? I'm really interested in hearing anyone's experience using it. BTW, I ended up installing Telegram ...and it may be mere co-incidence, but I started noticing some weird things happening that I've never seen before. I connect to the internet exclusively via tethering…

This. Why do you require Google Play services? Why do you spy on contacts?

Re: The Coder Who Encrypted Your Texts

#28

Post by lloydde »

btczeus wrote: post #22

This guy is not part of the solution. He is part of the problem. https://f-droid.org/posts/security-notice-textsecure/

Mozie response in the comments of that awkward 2012 post seems sane and solution oriented. https://f-droid.org/posts/security-notice-textsecure/#commen...
Post reply on HN