News for hackers. Stuff that matters.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by tptacek on Wednesday January 10, 2018 @11:12AM (#16116033)
People say things like this about Signal but tend not to acknowledge why Signal is like that. Look at how Signal handles something as basic as user profiles, then compare it to how other applications address the same problems. I'll recommend Wire alongside WhatsApp any day, but keep in mind that Wire's servers apparently have a record of every conversation that has occurred between any two Wire users (not the content, mind you, just the link).

This is why I disagree with Matthew Green, do not think we've totally figured out secure messaging yet and that they're all "so good", and think that if you're serious about privacy --- enough to have strong opinions about WhatsApp vs. Signal, for instance --- that you should use multiple messengers:

- a "tier 1" secure messaging app like Signal that makes all reasonable tradeoffs in favor of security and privacy regardless of the UX cost, used when possible and for sensitive conversations.

- a "tier 2" secure messaging app like WhatsApp or Wire as your "daily messenger".

- "tier 3" messenger applications (including email) that you use mostly to rendezvous to a real messenger application.

In this scheme you can start to understand Signal as not just a decent messenger application with best-in-class security and privacy, but also as a laboratory for future privacy enhancements to messaging.

Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by vitro on Wednesday January 10, 2018 @11:25AM (#16116220)
Ok, just those problems I have outlined seem to me like an UI hurdle. What's the problem making a simple copy of the message dispatched to the contacts I choose? As if I would do it manually?
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by gcb0 on Wednesday January 10, 2018 @11:40AM (#16116397)
the problem is the problem definition.

signal solves messaging.

but messaging is only a small part of whatsapp success. Whatsapp is a social network site. where you add friends by the bucket, even if you dont't plan on messaging them, and share baby pictures to a circle or family/friends.

Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by FabHK on Wednesday January 10, 2018 @11:59AM (#16116581)
And maybe add some "defence in depth" by splitting really sensitive ("tier 0") stuff across multiple channels/apps, such that any one breach doesn't compromise it.
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by QAPereo on Wednesday January 10, 2018 @12:34PM (#16116967)
Doesn’t this have the potential to inform a potential adversary as to your habits regarding those levels? “Ah he’s back on “tier 1” so this might be juicy!”
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by bigiain on Wednesday January 10, 2018 @07:29PM (#16120431)
This. I try to spend way more time being the haystack to keep my needle hidden best...