Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ...
by vitro on Wednesday January 10, 2018 @11:25AM
(#16116220)
Ok, just those problems I have outlined seem to me like an UI hurdle. What's the problem making a simple copy of the message dispatched to the contacts I choose? As if I would do it manually?
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ...
by gcb0 on Wednesday January 10, 2018 @11:40AM
(#16116397)
the problem is the problem definition.
signal solves messaging.
but messaging is only a small part of whatsapp success. Whatsapp is a social network site. where you add friends by the bucket, even if you dont't plan on messaging them, and share baby pictures to a circle or family/friends.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ...
by FabHK on Wednesday January 10, 2018 @11:59AM
(#16116581)
And maybe add some "defence in depth" by splitting really sensitive ("tier 0") stuff across multiple channels/apps, such that any one breach doesn't compromise it.
This is why I disagree with Matthew Green, do not think we've totally figured out secure messaging yet and that they're all "so good", and think that if you're serious about privacy --- enough to have strong opinions about WhatsApp vs. Signal, for instance --- that you should use multiple messengers:
- a "tier 1" secure messaging app like Signal that makes all reasonable tradeoffs in favor of security and privacy regardless of the UX cost, used when possible and for sensitive conversations.
- a "tier 2" secure messaging app like WhatsApp or Wire as your "daily messenger".
- "tier 3" messenger applications (including email) that you use mostly to rendezvous to a real messenger application.
In this scheme you can start to understand Signal as not just a decent messenger application with best-in-class security and privacy, but also as a laboratory for future privacy enhancements to messaging.