I installed it on my iPhone. I'm able to discover and call friends that have RedPhone, but they can't see me. Is that a feature or a bug :P
Free, Worldwide, Encrypted Phone Calls for iPhone
131–140 of 211 posts
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#132Why is the App Store application search process so horrible? I agree, "Signal" and "Whisper" are bad things to have to search for, but there's basically no way to enter a simple memorable text string in the store and get the right app. I ended up using a browser on the phone to go to the HN article to go to the right app store link. I can't believe this hasn't been solved.
It might not be in there yet. The app was released about an hour ago.
https://itunes.apple.com/app/id874139669
Got to it on the company website, but on a desktop browser (can't find it using my phone browser). So I emailed the URL to myself to click on it in my phone mail client :-)
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#133Earlier quoted context omitted.
Yes. And you should probably assume that their claims of end-to-end encryption are about as solid as they were for iMessage. http://blog.cryptographyengineering.com/2013/06/can-apple-re... http://arstechnica.com/security/2013/06/can-apple-read-your-... http://www.zdnet.com/apples-imessage-encryption-claims-refut...
Didn't Apple debunk that debunking themselves in February, when they released the iOS Security doc? [1] According to Apple, each device's private key is generated locally and never leaves the device, making it impossible to MITM your messages. From page 20: "For each key pair, the private keys are saved in the device’s keychain and the public keys are sent to Apple’s directory service (IDS), where they are associated…
That doesn't make it impossible to MITM - Apple still controls the keyserver.
When I ask for nardi's public key, they can give me theirs, I encrypt it with that key and send it. They use their private key to decrypt it, store it, and then encrypt it with your actual public key and forward it along, neither of us any the wiser.
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#134"Signal uses your existing number, doesn’t require a password, and leverages privacy-preserving contact discovery to immediately display which of your contacts are reachable with Signal." How does contact discovery work? What happens when run on a device without a (valid) SIM?
They've blogged a bit about this challenge in the past:
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#135Earlier quoted context omitted.
Not necessarily, because things like robots.txt will still prevent it from ending up in search engine results.
I forgot about the part where it's mandatory for search engines to comply with a robots.txt
Well actually the relatively hard part is hosting a crawler of decent size, and then if you crawl in violation of robots.txt its pretty straight forward to use iptables to ban you, of course you then spend money on hiring a botnet to mask your traffic footprint, except that on that same darknet there might be people who are friends of the owner of that botnet.
It is non-obviously difficult.
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#136"Signal uses your existing number, doesn’t require a password, and leverages privacy-preserving contact discovery to immediately display which of your contacts are reachable with Signal." How does contact discovery work? What happens when run on a device without a (valid) SIM?
It looks like it uses bloom filters for the phone number:
isCntactRegisteredWithWhisper calls isPhoneNumberRegisteredWithWhisper:
https://github.com/WhisperSystems/Signal-iOS/blob/19ff47e278...
The implementation is simply checking a bloom filter:
https://github.com/WhisperSystems/Signal-iOS/blob/19ff47e278...
… and the filter is periodically downloaded from their servers:
https://github.com/WhisperSystems/Signal-iOS/blob/19ff47e278...
https://github.com/WhisperSystems/Signal-iOS/blob/19ff47e278...
which ultimately ends up at:
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#137Earlier quoted context omitted.
[deleted]
Is there any way you can substantiate any of this? I wouldn't be shocked, but it seems borderline implausible that we'd be getting all this interest in various ways to hack into iPhones physically if you could just dial a number--and I think it also goes without saying that, whether Apple provides official backdoors or no, it has a high interest in ensuring that there aren't any unofficial backdoors for many other re…
Can confirm this. I interviewed for a UK based competitor who was scared NSO were better. The competitor's supposed capabilities were scary enough for me to bin my phone contract at the time because they had my contact details. The agent was less than honest about the job description as well. Arseholes all around.
Posting anon, well that's obvious.
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#138Ahhhh I'm so excited for this, but it's not in the Australian store and I can't change it to US as I have an iTunes Match sub :( Any ETA on when it'll be here?
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#139Earlier quoted context omitted.
Signal is a much more neutral brand than RedPhone. RedPhone sounds either like an adult network or spying app. At one of the Shuttleworth Foundation gatherings (where all Shuttleworth fellows meet bi-annually) I remember having a conversation about the branding of RedPhone and everyone unanimously agreed that it would hinder wider spread adoption of the software. I'm not sure what all the factors in re-branding were…
Makes sense - do you know if they will be re-branding RedPhone on Android? Just curious.
From the linked page:
Signal will be a unified private voice and text communication platform for iPhone, Android, and the browser. Later this summer, Signal for iPhone will be expanded to support text communication compatible with TextSecure for Android. Shortly after, both TextSecure and RedPhone for Android will be combined into a unified Signal app on Android as well. Simultaneously, browser extension development is already under way.
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#140It's great that we have more privacy options for phone calls, texts, etc. But we still need a great "Privacy" phone, right? There's been attempts to do so recently (Blackphone, PrivacyPhone), but both have suffered from the same fault: a binary blob for the baseband, something that renders all your privacy moot. I've heard the best recommendation is a tablet + USB LTE dongle, to put some space between the two process…
"I've heard the best recommendation is a tablet + USB LTE dongle, to put some space between the two processors " This is an interesting, and tempting, direction to go in ... my understanding is that this is problematic, however. You see, in addition to all of the (radio stuff) that the baseband processor handles, it turns out that they also handle a lot of voice quality functions, such as noise cancel, echo cancel, i…
A couple thoughts:
1) A LTE dongle still has a binary blob.
2) An example of the kinds of things one has to deal with: many 8 numbers will drop calls that don't provide a supervised signal to the public switched telephone network.
Many phone apps simply neglect to implement call supervision, which causes weird failures when interfacing with some pbx systems.
See here for some more detail: http://www.voip-info.org/wiki/index.php?page_id=3209