News for hackers. Stuff that matters.
Re:We Chat, They Watch by otachack on Thursday May 07, 2020 @08:40PM (#23110100)
You also have to trust the source code, or trust a recent audit, then also make sure the build you have kept it's integrity and matches the audit build.
Re:We Chat, They Watch by jdm2212 on Thursday May 07, 2020 @08:44PM (#23110138)
There are degrees of security between "I personally built it from source using a compiler I personally built from source" and "Xi Jinping is CC'ed a plaintext copy of every message". The allegation here is that WeChat is basically the latter. No one makes any remotely similar claim about iMessage or WhatsApp.
Re:We Chat, They Watch by jbombadil on Thursday May 07, 2020 @09:09PM (#23110326)
If you have never read "Reflections on Trusting Trust" by Ken Thompson, I wholeheartedly recommend it. It's a short read (3 pages), but absolutely worht your time.

https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...

Re:We Chat, They Watch by notlukesky on Thursday May 07, 2020 @10:08PM (#23110657)
Why is your link downvoted?
Re:We Chat, They Watch by jdm2212 on Thursday May 07, 2020 @10:29PM (#23110787)
People might've mistaken it for pedantry/condescension? I certainly didn't take it that way (gave it an upvote) -- though I have read that paper, and was thinking of it when I wrote my original comment :)
Re:We Chat, They Watch by jbombadil on Friday May 08, 2020 @01:07PM (#23116998)
It was not my intention to be condescending. I legitimately enjoyed that paper (the technical part mostly), and thought it was relevant to what you were saying. I've found a lot of many interesting articles in hackernews comments and wanted to share one back.
Re:We Chat, They Watch by freepor on Thursday May 07, 2020 @08:56PM (#23110241)
You forgot "I personally built it from source using a compiler I personally built from source with a micro-compiler that I handcoded in assembly on a computer that I assembled from transistors myself."
Re:We Chat, They Watch by 9nGQluzmnq3M on Thursday May 07, 2020 @09:58PM (#23110599)
But what if the transistors contain microchips that are phoning home?

Clearly the only solution is to forage your own silicon for artisanal fabrication of your own chips.

Re:We Chat, They Watch by LeonB on Friday May 08, 2020 @01:15AM (#23111623)
All of which you did inside a simulated world built for spying on you. There’s no theoretical ability to verify the whole stack.
Re:We Chat, They Watch by jasdfijsflj on Thursday May 07, 2020 @08:50PM (#23110183)
How about "Mark Zuckerberg is CC'ed a plaintext copy of every message"
Re:We Chat, They Watch by MattGaiser on Thursday May 07, 2020 @09:00PM (#23110270)
Better Zuckerberg than Xi. Zuckerberg has no power to have a bag put over anyone's head and have them carried away to the river.
Re:We Chat, They Watch by pinewurst on Thursday May 07, 2020 @09:21PM (#23110391)
Not yet anyway - remember his “listening” campaign and seeming murmurs of entering politics. He’s still young, unlike Winnie the Pooh...
Re:We Chat, They Watch by aplummer on Thursday May 07, 2020 @09:41PM (#23110494)
Even if he did enter politics (in America), it’s not at all the same thing.
Re:We Chat, They Watch by pinewurst on Thursday May 07, 2020 @10:17PM (#23110715)
I wouldn’t trust him not to use all the tools at his disposal to grasp the levers of power. He’s a stone sociopath IHMO.
Re:We Chat, They Watch by Moodles on Thursday May 07, 2020 @08:42PM (#23110120)
The question was: do we have any reason to believe it's more secure than weChat? I say yes but those are all valid points.