News for hackers. Stuff that matters.
Re:WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents by spullara on Tuesday March 07, 2017 @12:31PM (#13812487)
If the app and service were not involved the only reason to mention them is to create doubt they are secure.
Re:WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents by daenney on Tuesday March 07, 2017 @12:40PM (#13812606)
Not necessarily. To a lot of people encryption is "using Signal" or "using WhatsApp". They don't necessarily understand that these are distinct things and that their communications could still be captured by virtue of simply using a phone.
Re:WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents by rising-sky on Tuesday March 07, 2017 @12:37PM (#13812571)
"The strongest chain will break at it's weakest point".

If I as a user, believe that a sequence of actions, from my keystrokes to voice input, which I perceive to be a direct interaction with a secure app are in fact insecure, then is the app really secure?

I guess that's the question being posed here

Re:WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents by ballenf on Tuesday March 07, 2017 @12:47PM (#13812689)
There is a balance -- one is reminded of the constant "data charged may apply" footnote to so many free services. The same goes here: you really shouldn't tout your impenetrable security without also informing users that things external to the service may undermine its utility.
Re:WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents by spullara on Tuesday March 07, 2017 @12:41PM (#13812627)
Also make sure no one is looking over your shoulder or listening nearby. "Signal encryption bypasssed by new look over shoulder attack."
Re:WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents by accountface on Tuesday March 07, 2017 @12:47PM (#13812695)
I think it's a little different when the person "looking over your shoulder" is omnipotent.
Re:WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents by accountface on Tuesday March 07, 2017 @12:46PM (#13812684)
The OS these services run on isn't secure, so wouldn't these services by definition not be secure?