141–150 of 191 posts
Earlier quoted context omitted.
And that is one country out of ~200.
Yes but it has 350M people living in it, half the HN, Silicon Valley, and Moxie with his team. It's not honest to say the US is just another country among 200.
Earlier quoted context omitted.
And that is one country out of ~200.
Yes but it has 350M people living in it, half the HN, Silicon Valley, and Moxie with his team. It's not honest to say the US is just another country among 200.
Earlier quoted context omitted.
From https://github.com/WhisperSystems/TextSecure/issues/53 Moxie: "I'd like to avoid distributing APKs outside of the Play Store" Why give a single entity the power to push a malicious update anytime?
that's not how the Play store (or Android) works. Moxie signs the APK, phones will only install updates that are signed with the same certificate as the version they already have. Google cannot modify apps. Edit: In contrast, the F-Droid builds were built and signed by F-Droid, so they could at any time include any code they wanted. Whom do you trust more, the developer or some alternate app store?
And I certainly trust an open source project much more than a US company.
I've had a ton of respect for Marlinspike ever since he published sslstrip, an incredibly simple defeat of HTTPS.[1] It's a perfect demonstration of the fundamental insecurity of the web thus far. When an insecure communication mode (HTTP) is the default and perfectly ok most of the time, the browser has no idea when you are supposed to be operating on a secure channel (HTTPS) but have been tricked into downgrading b…
> the browser has no idea when you are supposed to be > operating on a secure channel (HTTPS) Agree about the sentiment, but there are some ways to help this. The server can for instance tell the client to always require https: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security Doesn't help if the client hasn't yet connected to the right server at least once, though.
>Unfortunately, if Mr. Marlinspike’s encryption scheme can be applied to imagery, then childporn collectors thank him too. And there we go, highest voted comment on the article: a strawman about child pornography. Think of the keeeds
Either it's an uninformed person or it's a shill. Public opinion manipulating, as usual. https://firstlook.org/theintercept/2014/02/24/jtrig-manipula...
Earlier quoted context omitted.
"there is no way to detect someone uninstalling without unregistering" The TextSecure app could ping your server with a "I am still here" message if it goes a week without sending any messages. Don't hear from it for two weeks? Unregister it. Would this not work?
Not having a connection for a month doesn't necessarily mean you're not "still here".
I get a lot of credit for the stuff that Open Whisper Systems does, but it's not all me by a long shot. Trevor Perrin, Frederic Jacobs, Christine Corbett, Tyler Reinhard, Lilia Kai, Jake McGinty, and Rhodey Orbits are the crew that really made all this work happen.
Though I have to say, whilst I understand the absolute ballache of technical reasons for dropping SMS support, I'm _still_ extremely sad to see it gone :(
I already knew this would be an article about Moxie before clicking the link.