News for hackers. Stuff that matters.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by vitro on Wednesday January 10, 2018 @10:55AM (#16115835)
Yes, in Signal you for example still cannot share one photo to multiple recipients or share multiple photos. I've installed it to all my relatives and they use it anyway, just those simple things would make it a bit better for your average "share pictures of my kids" types of use.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by tptacek on Wednesday January 10, 2018 @11:12AM (#16116033)
People say things like this about Signal but tend not to acknowledge why Signal is like that. Look at how Signal handles something as basic as user profiles, then compare it to how other applications address the same problems. I'll recommend Wire alongside WhatsApp any day, but keep in mind that Wire's servers apparently have a record of every conversation that has occurred between any two Wire users (not the content, mind you, just the link).

This is why I disagree with Matthew Green, do not think we've totally figured out secure messaging yet and that they're all "so good", and think that if you're serious about privacy --- enough to have strong opinions about WhatsApp vs. Signal, for instance --- that you should use multiple messengers:

- a "tier 1" secure messaging app like Signal that makes all reasonable tradeoffs in favor of security and privacy regardless of the UX cost, used when possible and for sensitive conversations.

- a "tier 2" secure messaging app like WhatsApp or Wire as your "daily messenger".

- "tier 3" messenger applications (including email) that you use mostly to rendezvous to a real messenger application.

In this scheme you can start to understand Signal as not just a decent messenger application with best-in-class security and privacy, but also as a laboratory for future privacy enhancements to messaging.

Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by vitro on Wednesday January 10, 2018 @11:25AM (#16116220)
Ok, just those problems I have outlined seem to me like an UI hurdle. What's the problem making a simple copy of the message dispatched to the contacts I choose? As if I would do it manually?
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by gcb0 on Wednesday January 10, 2018 @11:40AM (#16116397)
the problem is the problem definition.

signal solves messaging.

but messaging is only a small part of whatsapp success. Whatsapp is a social network site. where you add friends by the bucket, even if you dont't plan on messaging them, and share baby pictures to a circle or family/friends.

Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by FabHK on Wednesday January 10, 2018 @11:59AM (#16116581)
And maybe add some "defence in depth" by splitting really sensitive ("tier 0") stuff across multiple channels/apps, such that any one breach doesn't compromise it.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by QAPereo on Wednesday January 10, 2018 @12:34PM (#16116967)
Doesn’t this have the potential to inform a potential adversary as to your habits regarding those levels? “Ah he’s back on “tier 1” so this might be juicy!”
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by bigiain on Wednesday January 10, 2018 @07:29PM (#16120431)
This. I try to spend way more time being the haystack to keep my needle hidden best...
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by zeveb on Wednesday January 10, 2018 @11:21AM (#16116152)
> Yes, in Signal you for example still cannot share one photo

Well, you can in a group chat.

I also wish that Signal had better search capabilities, and export/import on iOS.

And also support for non-phone accounts.

Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by teekert on Wednesday January 10, 2018 @11:12AM (#16116036)
You can definitely share pictures in groups in Signal.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by vitro on Wednesday January 10, 2018 @11:25AM (#16116208)
Groups maybe, but sometimes I do not want groups as people I share photos to speak different languages for example.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by thatcat on Wednesday January 10, 2018 @01:24PM (#16117449)
You can share photos 1 to 1 in signal too. If the other person doesn't have signal then you have to set your providers mms server in the settings, but it's not very difficult.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by teekert on Wednesday January 10, 2018 @05:11PM (#16119624)
I think indeed you're using it to send texts... But if the recipient is also on Signal it is very similar to Whatsapp, Gifs included.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by Vinnl on Wednesday January 10, 2018 @11:06AM (#16115963)
I think I did send photos to Signal groups?