Earlier quoted context omitted.
[deleted]
That will always remain an issue: Even if someone manages to create a secure app, the software and hardware platform will never be secure. Hijacking a smartphone by only knowing its number on the other hand does not seem realistic too me. So a source for this claim would be great …
Free, Worldwide, Encrypted Phone Calls for iPhone
21–30 of 211 posts
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#22It's great that we have more privacy options for phone calls, texts, etc. But we still need a great "Privacy" phone, right? There's been attempts to do so recently (Blackphone, PrivacyPhone), but both have suffered from the same fault: a binary blob for the baseband, something that renders all your privacy moot. I've heard the best recommendation is a tablet + USB LTE dongle, to put some space between the two process…
It doesn't render all your privacy moot. It's limited to snooping on what you send over the radio, which is the same as what your cell carrier would have access to even with a secure baseband. (Edit: unless the baseband hacks into the software running on the other side of the radio and exfiltrates data right from your SD card... hm...) What I would like to see is a way to verify that you're connected to a legitimate…
Not necessarily - some processors (Snapdragon, for example) implement the baseband right into the core processor -- it will have more access than just the radios. I'm pretty sure the baseband also has access to the memory as well, right?
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#23Curious why this is different than RedPhone - same company, same product(?), diff't platform - why not keep app branding?
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#24Many people are already familiar with Moxie Marlinspike's WhisperSystems because of their Android apps: RedPhone for encrypted calls, and TextSecure for SMS messages. The release of Signal is a pretty big deal for iOS users; previously, we had to consider a paid option like Silent Circle, or a larger corporate option like FaceTime Audio (which isn't really the same). Although I haven't actually used the app yet (it's…
Moxie also made a sailing documentary that is good called hold fast http://vimeo.com/15351476
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#25Um. Isn't encrypted calling on iPhones already provided by FaceTime Audio?
They claim to use SIP to establish an SRTP connection with AES-256. But I don't know any way to verify that the data is being encrypted well or sent only to the intended recipient. https://ssl.apple.com/iphone/business/docs/iOS_Security_Feb1...
> But I don't know any way to verify that the data is being encrypted well or sent only to the intended recipient.
Couldn't you say the same thing about Signal? Both parties claim to use end-to-end encryption.
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#26Is anyone else having trouble registering the app? I'm not receiving a SMS validation code.
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#27Um. Isn't encrypted calling on iPhones already provided by FaceTime Audio?
Yes, but it is not secure
"The audio/video contents of FaceTime calls are protected by end-to-end encryption, so no one but the sender and receiver can access them. Apple cannot decrypt the data." [1]
[1] https://ssl.apple.com/iphone/business/docs/iOS_Security_Feb1...
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#28Many people are already familiar with Moxie Marlinspike's WhisperSystems because of their Android apps: RedPhone for encrypted calls, and TextSecure for SMS messages. The release of Signal is a pretty big deal for iOS users; previously, we had to consider a paid option like Silent Circle, or a larger corporate option like FaceTime Audio (which isn't really the same). Although I haven't actually used the app yet (it's…
[deleted]
It's possible to do this in a staged way -- basically, give me 100k phone numbers, I'll do automated attacks and catch 25-50k of them (old unpatched OSes for which if I had a $5-10mm budget I'd have 0-days ready, phishing, etc.).
Then, use the early victims to catch the rest -- hopefully they're admin assistants, HR people, etc. Targeted attacks on the rest.
Black bag jobs on the remainder, using legal or extralegal means, based on value of the target. It's not worth bothering to black bag someone who you only want to get the big boss if the big boss is otherwise exploitable.
The key is you don't need to have a single exploit which works on 100% of your targets; you can do multiple things.
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#29Earlier quoted context omitted.
Is there any way you can substantiate any of this? I wouldn't be shocked, but it seems borderline implausible that we'd be getting all this interest in various ways to hack into iPhones physically if you could just dial a number--and I think it also goes without saying that, whether Apple provides official backdoors or no, it has a high interest in ensuring that there aren't any unofficial backdoors for many other re…
[deleted]
No one hides from google
http://www.haaretz.com/business/economy-finance/1.574805
Re: Free, Worldwide, Encrypted Phone Calls for iPhone
#30Curious why this is different than RedPhone - same company, same product(?), diff't platform - why not keep app branding?
Signal is better branding.