I wonder by "end-to-end" do they mean they will be implementing Signal Protocol, that would be a pretty awesome increase in security (for most peoples threat models)...WhisperSystems are genuinely amazing at what they do, they have like less than 5 staff and very little budget but they are literally saving hundreds if not thousands of lives. Any chance some rich HN member will recognise this and open up the chequebook to OWS?
Facebook Messenger begins testing end-to-end encryption using Signal Protocol
11–20 of 312 posts
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#12From what is written, I understand this to mean that users can select this feature for specific conversations. That not all messages are subject to this encryption. I am not usually one for paranoia, but is anyone else becoming more suspicious about Facebooks motivations and involvement with gov? This feature is a massive boost for intelligence services dealing with unsophisticated actors. This reduces the haystack s…
While it might be disappointing, I firmly believe this is a technical and business decision, not a conspiracy. If you look at the features Messenger offers, and the direction the product has been moving, it relies heavily on server-side technology.
Facebook have added contextual ride-share ordering, person-to-person payments, bots, etc. Unlike WhatsApp or Signal, Messenger also still works over the Web without an app or a smartphone-based login: how do you implement credible E2E over the Web, without using the phone as a crutch? How do you allow multi-device support, with a message history, and do E2E on all conversations?
I think they've (rightly, IMO) assessed that most people value those features and convenience over 100% E2E conversations, but want to offer the option to those who don't. Besides, if Facebook were really completely in bed with the surveillance state, why would they have just rolled out full E2E on WhatsApp?
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#13False sense of security built right into Facebook's marketing approach. Perfectly great idea for getting some of the juiciest dirt on everyone dumb enough to believe them.
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#14This article doesn't mention it, but Facebook Messenger will be using the Signal protocol: https://whispersystems.org/blog/facebook-messenger/
also, here is the white paper (from the above post): https://fbnewsroomus.files.wordpress.com/2016/07/secret_conv...
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#15"End-To-End Encrypted ‘Secret Conversations’" in software that is ordinarily used to harvest electronic phone books and rummage through user photos, from a company that made its whole fortune trying to obliterate privacy as a part of human culture? It's going to be pretty high standards of proof to give this anything that resembles credibility.
This is exactly what I'm thinking. I expect a post in he next day or so from Open Whisper people to lend credibility to this project. They seem to be the Go-To these days.
Edit: and it is http://www.whispersystems.org/blog/facebook-messenger
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#16"End-To-End Encrypted ‘Secret Conversations’" in software that is ordinarily used to harvest electronic phone books and rummage through user photos, from a company that made its whole fortune trying to obliterate privacy as a part of human culture? It's going to be pretty high standards of proof to give this anything that resembles credibility.
[deleted]
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#17From what is written, I understand this to mean that users can select this feature for specific conversations. That not all messages are subject to this encryption. I am not usually one for paranoia, but is anyone else becoming more suspicious about Facebooks motivations and involvement with gov? This feature is a massive boost for intelligence services dealing with unsophisticated actors. This reduces the haystack s…
> Why doesn't FB just apply encryption on all messages? The same reason Gmail can't work with end-to-end encryption--they want to advertise at you based on message content. I highly doubt there is any government intervention in FB's business strategy, but there seems to be plenty of cooperation after the business decisions are made. (The same is largely true with Microsoft, Google, and yes, even Apple.) It's not real…
> The same reason Gmail can't work with end-to-end encryption--they want to advertise at you based on message content.
I wonder how they'd do if they were more open about it. "You're getting Gmail for free because we read your email and advertise to you. However, if you want to pay for a premium account (or Google Apps for Work) then we won't advertise to you, won't read your email and we'll even make end-to-end encryption easy and convenient".
I mean, it seems like a good compromise. I'd be happier with the rampant advertising and profiling going on if it was only for signed-in users and everyone was given the choice - use it for free or pay and get guaranteed privacy and no ads.
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#18"End-To-End Encrypted ‘Secret Conversations’" in software that is ordinarily used to harvest electronic phone books and rummage through user photos, from a company that made its whole fortune trying to obliterate privacy as a part of human culture? It's going to be pretty high standards of proof to give this anything that resembles credibility.
I am confident Facebook will meet your high standards when it comes to E2E encryption for Messenger.
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#19I'm still sticking with the website version, thanks https://play.google.com/store/apps/details?id=com.facebook.o... Messenger, Facebook This app has access to: Identity find accounts on the device read your own contact card add or remove accounts Contacts find accounts on the device read your contacts modify your contacts Location precise location (GPS and network-based) approximate location (network-based) SMS edit…
Why are you using Facebook in the first place? I thought the HN valued their privacy. Try https://hubzilla.site instead.
Re: Facebook Messenger begins testing end-to-end encryption using Signal Protocol
#20"End-To-End Encrypted ‘Secret Conversations’" in software that is ordinarily used to harvest electronic phone books and rummage through user photos, from a company that made its whole fortune trying to obliterate privacy as a part of human culture? It's going to be pretty high standards of proof to give this anything that resembles credibility.
I am confident Facebook will meet your high standards when it comes to E2E encryption for Messenger.
/S?