News for hackers. Stuff that matters.
Re:Ask HN: Best encrypted messaging app atm? by sprafa on Tuesday November 15, 2016 @08:42AM (#12957861)
I've heard Signal has US Government backing, which makes me scared for an NSA backdoor. Any idea about this?
Re:Ask HN: Best encrypted messaging app atm? by lorenzhs on Tuesday November 15, 2016 @09:37AM (#12958290)
Where have you heard this? I wouldn't question Moxie's integrity lightly, his track record is impressive.
Re:Ask HN: Best encrypted messaging app atm? by geofft on Tuesday November 15, 2016 @11:15AM (#12959278)
Wikipedia says that Open Whisper Systems has received a significant amount of funding [1] from the Open Technology Fund, run by Radio Free Asia [2], a US-government-run propaganda organization.

Of course, this is the arm of the US government that very actively doesn't want back doors, because they operate in territories controlled by other not-necessarily-friendly governments. They need communications to be reliably secret, and they have no need to tap those communications. It's the same reason that government funding for Tor isn't inherently a problem for Tor's security, and you see other parts of the US government, like the FBI, trying to hack it.

It's definitely worth worrying that the government could decide that this part of its mission is no longer worth funding. But it isn't likely to be a risk of back doors. (Especially compared to all the other usual risks, notably simple bugs like Heartbleed and Weak DH.)

[1] https://en.wikipedia.org/wiki/Open_Whisper_Systems#Funding

[2] https://en.wikipedia.org/wiki/Radio_Free_Asia

Re:Ask HN: Best encrypted messaging app atm? by mickaldo on Tuesday November 15, 2016 @12:29PM (#12960134)
It is indeed backed by the US government, see https://news.ycombinator.com/item?id=8106721.

The best way to go is Threema, IMO. Can be used completely anonymously. Servers are located in Switzerland. Uses NaCl. Recommended by Steve Gibson. Not free, though.

Re:Ask HN: Best encrypted messaging app atm? by dylz on Tuesday November 15, 2016 @04:08PM (#12962236)
- "requires payment" and "completely anonymously" seem at odds; especially when the person you're communicating with will likely have purchased it from an app store. i understand that there is a way to purchase it with btc at their own site, but that doesn't really help with licencing and GCM

- proper implementation of e2e means where the servers are shouldn't matter

- threema uses GCM too -> whole google play services framework

- this steve gibson? http://attrition.org/errata/charlatan/steve_gibson/