News for hackers. Stuff that matters.
Re:There is no WhatsApp 'backdoor' by Veratyr on Friday January 13, 2017 @09:23PM (#13396483)
> Key changes in a messenger are totally different. They happen under normal conditions

This doesn't have to be the case. If you stop coupling a key to a device and instead couple a key to a person (generating a key deterministically from a password for example), they can be changed far more rarely.

Re:There is no WhatsApp 'backdoor' by mavhc on Saturday January 14, 2017 @03:20AM (#13397505)
Whatsapp became popular because they worked out a way to not have to have people create an account and a password, you're overestimating humans
Re:There is no WhatsApp 'backdoor' by Saavedro on Friday January 13, 2017 @11:17PM (#13396836)
this requires humans to be able to generate and remember passwords with decent entropy
Re:There is no WhatsApp 'backdoor' by Veratyr on Saturday January 14, 2017 @03:04AM (#13397465)
That was just an example. You could also pair the key to a person by some other method, such as storing a copy of it on a storage medium other than their phone.
Re:There is no WhatsApp 'backdoor' by zulln on Saturday January 14, 2017 @11:21AM (#13399071)
Requiring a external storage medium would kill the service. I think you have to separate a service made for the masses and a service with focus on security/encryption. For WhatsApp there will be some instances where you have to choose between security and convince, and they have choose the former, which is only naturally.
Re:There is no WhatsApp 'backdoor' by Veratyr on Saturday January 14, 2017 @12:14PM (#13399351)
I didn't say it has to solely reside on the storage medium. The phone can keep a copy and a user can make a backup.
Re:There is no WhatsApp 'backdoor' by dleslie on Saturday January 14, 2017 @01:25AM (#13397212)
Pass phrases.
Re:There is no WhatsApp 'backdoor' by pmontra on Saturday January 14, 2017 @02:24AM (#13397362)
There is one pass phrase I remember, 5 passwords, 2 PINS, 2 phone numbers. My password manager and address book remember hundreds of passwords, phone numbers and emails each.

For some reasons everybody uses an address book, many people let browsers remember passwords but almost everybody resists the idea of using a password manager and end up with low entropy passwords.