Re:Looking back at how Signal works
by mycall on Saturday June 06, 2020 @09:23PM
(#23443911)
SS7 spoofing is not a hard thing to do. Who knows if you really are initiating to +14055551212 who you think they are. I guess using multiple techs in serial could obfuscate the initiation correctly (voice, IM, Social Media, etc)
[ Parent
| on HN ]
Re:Looking back at how Signal works
by yencabulator on Monday June 08, 2020 @12:48PM
(#23458210)
PGPFone had a neat thing where it'd show each participant of a voice call a short string they'd read out loud, and then the crypto would use those for handshaking. MITM'ing voice, as part of a freeform conversation, especially between friends, is a lot harder.