Live data from Hacker News

Talk – Smart, Private Messaging

path.com

21–30 of 40 posts

Re: Talk – Smart, Private Messaging

#21

I don't understand why the new chat protocols and clients focus solely on mobile (phone?) platforms. Why aren't there more desktop clients ?

Absolutely. All the messaging platforms I regularly use have a way to use them on the desktop. Facebook, Google Hangouts, Google Voice and Telegram.

Re: Talk – Smart, Private Messaging

#22
post #12

Earlier quoted context omitted.

If they really took privacy seriously they wouldn't be able to decipher the message even as it passed through their servers. There are already apps that make end-to-end encryption user friendly (Telegram comes to mind).

Even iMessage uses end-to-end encryption. It's a pretty poor sign if it's less secure than the service already built into the phone. (And yeah I know iMessage isn't open source and so this is difficult to verify, but "Talk" isn't open either. Apple published a big PDF about how they do encryption - if this were proved to be false it would destroy all trust in Apple forever, so I believe what they say.) Big PDF: http:…

Interesting, did not know that. Apple is still in a position to MITM the transaction if they wanted though (Telegram provides a key visualization that can be compared offline to prevent this)

Re: Talk – Smart, Private Messaging

#25
post #4

Maybe I don't understand, but why even have messages retained on the server at all? Couldn't the local app keep them stored on the phone? Also, does anyone know if they're encrypted at all. In this day and age isn't that a requirement for them to be considered private?

What if the other phone is off at the time? You kind of need a server to act as a buffer. No reason why it couldn't be client side encrypted though... iMessage does that.

the sender can do that.

Re: Talk – Smart, Private Messaging

#26

I don't understand why the new chat protocols and clients focus solely on mobile (phone?) platforms. Why aren't there more desktop clients ?

Next time you are out, check out what most people are doing on their phones. SMS dominates usage so much. Most people don't use desktop chat outside of tech

Re: Talk – Smart, Private Messaging

#27
post #25

Earlier quoted context omitted.

What if the other phone is off at the time? You kind of need a server to act as a buffer. No reason why it couldn't be client side encrypted though... iMessage does that.

the sender can do that.

What if the sender is offline when the receiver signs back on? Does the message not get sent?

Re: Talk – Smart, Private Messaging

#28
post #6

"Deleted from our server" assumes the user has no understanding of data forensics. We really need TextSecure on iOS soon to stop the proliferation of all of these silly privacy apps. There needs to be a strong cross-platform alternative.

Here here, I go through a range of emotions each time I see a new messaging app and they always end with me checking the WhisperSystems blog.

Re: Talk – Smart, Private Messaging

#29
post #12

Earlier quoted context omitted.

If they really took privacy seriously they wouldn't be able to decipher the message even as it passed through their servers. There are already apps that make end-to-end encryption user friendly (Telegram comes to mind).

Supposedly Apple can't decipher iMessages: http://techcrunch.com/2014/02/27/apple-explains-exactly-how-...

>When someone starts an iMessage conversation with you, they fetch your public key(s) from Apple’s servers. Before that message leaves the sender’s device, it’s encrypted into something that only your device knows how to decrypt.

From the article, that's the part where Apple could MITM the communication, because public keys retrieved from Apple would be automatically trusted. They can just silently inject an extra public key for which they have the private key. That said, it seems like the protocol at least has forward secrecy, meaning that if they didn't inject a bad key when the message was sent, there's not much they can do later to decrypt the message (unless they have a backdoor that allows them to force your phone to send them its private key)

Re: Talk – Smart, Private Messaging

#30
post #19
post #11

Does Path have any interest at all in making money so they can, ya know, become a real business? Or are they just another participant in the big-VC social network app ponzi scheme?

I addressed this in another comment, but the ability to message businesses that they are rolling out in the summer would be their gateway to actually making money (businesses want to hear feedback about themselves but there aren’t many solutions that address this well yet).

Don't businesses already get a lot of this through Twitter, Facebook, Get Satisfaction, and other sources?
Post reply on HN