201–210 of 211 posts
Earlier quoted context omitted.
To my knowledge, Jitsi fulfills your Holy Grail of Secure Communications requirements. It certainly much more trustworthy than Skype.
Needs to be quality on mobile too.
Earlier quoted context omitted.
Donations is not a business model.
You can downvote all you want, but you are missing the point. Is Whisper Systems a charity, non-profit or a commercial entity? If it's either of first two, then it would've only make sense to say just that in the About section, because it would alleviate all questions of why their products are free. However if it's a commercial entity, the question remains - how do they plan on making money? And donations is a silly…
See - http://en.wikipedia.org/wiki/Whisper_Systems
There's no need to be so cynical with this lot.
Earlier quoted context omitted.
"We're going to need verifiable sources for claims like that." This entire parent+thread argument back and forth is completely absurd. It doesn't matter whether he has sources. It doesn't matter whether that firm does or does not exist. It doesn't matter what you think of their tech or his explanation or who is who or what is what. Your phone has two[1] completely independent, full-featured computers inside of it, to…
>> Whisper systems does not solve this. SecurePhoneBlahBlah does not solve this. 1. The SIM chip generally is not a full featured computer and I'm unsure that it would have DMA access. But yes the baseband processor is indeed an issue. 2. Products like this prevent the kind of passive data-slurping that has been popular so far - i.e. install a box at the telco and record everything. That's a good start. So yes, it do…
And that's the point ... right now the stingrays and such simply act as IMSI catchers, etc., but if they can impersonate the carrier they can upload arbitrary java applets to the SIM card which can undermine the call-encryption app you are using. It's an obvious next step which you aren't protected against.[1]
I don't know if any SIM cards get DMA access the way some baseband processors (not all) do ...
[1] You could get one of those little sim wrapper foils and enable encryption-only for your SIM (which it almost certainly does not have now) which I think would defeat a lot of the carrier-impersonation attacks ...
Earlier quoted context omitted.
Why is it so hard to find cross-platform, encrypted group chat? Surely there's a market for it.
if mobile/tablet-only is OK, try wickr (wickr.com). It works fairly well for me. They have a $100.000 bounty for someone who manages to break their code/get communication contents and they're sponsored by the EFF. The downsides are that it's closed-source and that there's no desktop client (yet).
When your tools are secure, they work for you and not the other way around.
Earlier quoted context omitted.
Actually you could . They are called "deterministic builds". But this would require some kind of effort from project maintainers.
You cannot do that for iOS binaries, because they are signed by Apple before publishing on the Store (and so the hash will change).
Earlier quoted context omitted.
Well actually the relatively hard part is hosting a crawler of decent size, and then if you crawl in violation of robots.txt its pretty straight forward to use iptables to ban you, of course you then spend money on hiring a botnet to mask your traffic footprint, except that on that same darknet there might be people who are friends of the owner of that botnet. It is non-obviously difficult.
Does this not rather beg the question - is there a deep web, and how big (or small) is it. I can easily understand the desire for a coherent group of people putting up vpns etc to keep their world seperate from others - but that implies you join in based on some other criteria, which sounds not very deep web but pretty secret-VPN-we-are-not-telling-you-about-unless-we-cross-your-AS-Number-when-something-is-obvious It…
So it is a "collection" of secret societies, each with their own quirks. As a collection is constitutes a 'web' and perhaps the only commonality is the desire to not be part of the "public" web.
Earlier quoted context omitted.
Didn't Apple debunk that debunking themselves in February, when they released the iOS Security doc? [1] According to Apple, each device's private key is generated locally and never leaves the device, making it impossible to MITM your messages. From page 20: "For each key pair, the private keys are saved in the device’s keychain and the public keys are sent to Apple’s directory service (IDS), where they are associated…
That doesn't make it impossible to MITM - Apple still controls the keyserver. When I ask for nardi's public key, they can give me theirs, I encrypt it with that key and send it. They use their private key to decrypt it, store it, and then encrypt it with your actual public key and forward it along, neither of us any the wiser.
Next round of Edward Snowden leaks: "NSA created and funded 'open whisper systems' as a way to get people to think their calls were encrypted when in reality calls went straight to the NSA..."
Not NSA directly but apparently US. Government did fund Open Whisper Systems: "US. Government Funded Your Favorite ‘NSA-Proof’ Apps" http://revolution-news.com/us-government-funds-favorite-nsa-... "Radio Free Asia funds many software projects through its Open Technology Fund." (...) "The Open Technology Fund listed Open Whisper Systems as accepting $455,000 in 2013."
Open technology fund 2013 report:
https://www.opentechfund.org/sites/default/files/attachments...
"Open Whisper Systems $455,000"
https://www.opentechfund.org/about
"the Open Technology Fund (OTF) was created in early 2012 from U.S. Government (USG) funds and sustained by annual grants from the Broadcasting Board of Governors (BBG) as a program of Radio Free Asia (RFA)"
Next round of Edward Snowden leaks: "NSA created and funded 'open whisper systems' as a way to get people to think their calls were encrypted when in reality calls went straight to the NSA..."
Open Whisper Systems is fund by the Shuttleworth Foundation. https://www.shuttleworthfoundation.org/about-us/team/
https://www.shuttleworthfoundation.org/fellowship/fellows/cu...
But it appears he personally only "helps" Open Whisper Systems:
http://www.thoughtcrime.org/blog/we-should-all-have-somethin...
"I help work on Open Source security and privacy apps at Open Whisper Systems"
On more accurate side, see also 2013 report of Open Technology Fund which granted 445K USD directly to the Open Whisper Systems in 2013.