How to intercept all Wire voice and video calls

Re:How to intercept all Wire voice and video calls by ge0rg on Friday January 20, 2017 @10:14AM (#13444342)

Tl;dr: Wire voice and video chats use SRTP encryption, but the key is transmitted over the Wire server using normal TLS without further authentication checks or Certificate Pinning. A Wire employee or malicious government could MitM the claimed end to end encryption.

[ Parent | on HN ]

Re:How to intercept all Wire voice and video calls by tyingq on Friday January 20, 2017 @11:10AM (#13444759)

The point that the servers are in Ireland, versus Switzerland, is interesting as well, given that "Swiss Based" is used as a marketing pitch.

[ Parent | on HN ]

Re:How to intercept all Wire voice and video calls by zokier on Friday January 20, 2017 @11:31AM (#13444909)

On a quick browse I found these two references to Switzerland:

Frontpage: "Swiss-based, EU hosted"

Bottom of the "Privacy" page: "Wire is based in Switzerland and is fully compliant with Swiss and EU data protection laws."

I don't think that is "making a big deal", or even misleading. Especially the frontpage reference is actually really honest.

[ Parent | on HN ]

Re:How to intercept all Wire voice and video calls by tyingq on Friday January 20, 2017 @11:46AM (#13445021)

It's not outright dishonest, but it seems pretty clear why they like the word "Swiss", but generalize Ireland as "EU". I'm sure many of their customers read that as "Oh, it's all in Switzerland, where privacy matters." I know Switzerland isn't in the EU, but I suspect not all their potential customers know that.

[ Parent | on HN ]

Re:How to intercept all Wire voice and video calls by trizinix on Friday January 20, 2017 @01:23PM (#13445754)

Is it really based in Switzerland? If you look at the jobs page, they are all in Berlin. My guess would be registred in Switzerland, based in Germany and Data stored in Irland.

[ Parent | on HN ]