Wire messenger server code open-sourced

Re:Wire messenger server code open-sourced by zedred on Saturday April 08, 2017 @07:50PM (#14069712)

I was hopeful at first. A large VC funded company with a big full time team should run circles around a small open source effort, but their security is still way behind Signal. I was also quickly put off by their "less than honest" marketing.

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by walterbell on Saturday April 08, 2017 @09:30PM (#14069993)

Could you share details on "security is still way behind Signal"?

Edit: found previous discussion, https://news.ycombinator.com/item?id=13132157

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by zedred on Saturday April 08, 2017 @10:31PM (#14070156)

I haven't directly explored the source for either in little while, so I should take a new look. I might be a little out of date, but the things that I have seen second hand recently confirmed my earlier conclusions.

Like I recently saw an announcement from Wire that calls are now secure, but they had been advertising them as secure all along! I had even spent time looking through the code but didn't know that calls weren't authenticated. Now are they really secure? I don't know, they said that before too, and the source is so hard to follow. Then I saw a post that showed they weren't even doing cert pinning, which is so basic.

I wanted to like it, but the more I looked the more I felt like "security" was just sprinkled on as an after thought.

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by walterbell on Sunday April 09, 2017 @01:16AM (#14070617)

Did you see that they implemented CBR for audio calls and submitted patches to both Signal and WebRTC?

https://medium.com/@wireapp/call-security-constant-bit-rate-...

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by JshWright on Sunday April 09, 2017 @09:45AM (#14072234)

In 2017... CBR has been a thing in secure calling apps for ~5 years now.

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by walterbell on Sunday April 09, 2017 @12:03PM (#14072904)

Can you recommend some iOS/Android apps which support CBR?

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by JshWright on Sunday April 09, 2017 @03:55PM (#14074057)

Silent Phone is both Android and iOS compatible, and we have used CBR codecs since we launched (in 2012).

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by walterbell on Sunday April 09, 2017 @04:38PM (#14074245)

Thanks for the pointer ($10/month), did not know this was available without buying a Blackphone.

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by Siimteller on Sunday April 09, 2017 @03:34PM (#14073955)

Care to name one?

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by JshWright on Sunday April 09, 2017 @03:53PM (#14074047)

Silent Phone (disclosure: I am an employee)

[ Parent | on HN ]

Re:Wire messenger server code open-sourced by Propen on Sunday April 09, 2017 @07:56AM (#14071840)

https://techcrunch.com/2017/02/10/messaging-app-wire-now-has...

[ Parent | on HN ]