News for hackers. Stuff that matters.

A comment on Ask HN: How do we know Signal or Telegram don't store our data on their servers?. Parent comment

Re:Ask HN: How do we know Signal or Telegram don't store our... by Enginerrrd on Wednesday January 13, 2021 @12:07PM (#25764890)
Yeah and since you have the possibility of dealing with state actors with deep pockets, you have to wonder if Android or iOS doesn't have the ability to copy your private keys and send those off somewhere for storage. Because of signal's popularity, it feels pretty possible to me.

If the NSA did have it backdoored somehow through the OS, it's a good bet they'd force LE agencies to use parallel construction to keep that information top secret.

That is why we really need open source hardware and OS's. A good (or even functional) open linux phone can't come fast enough.

[ Parent | on HN ]
Re:Ask HN: How do we know Signal or Telegram don't store our... by bigiain on Wednesday January 13, 2021 @07:38PM (#25770145)
If your adversary is state actors with deep pockets or the NSA, you've lost already. No amount of opsec cosplay is going to save you.

Your solution?

* Magical amulets?

* Fake your own death, move into a submarine?

* YOU’RE STILL GONNA BE MOSSAD’ED UPON

https://www.usenix.org/system/files/1401_08-12_mickens.pdf

[ Parent | on HN ]
Re:Ask HN: How do we know Signal or Telegram don't store our... by acct776 on Thursday January 14, 2021 @12:10AM (#25772363)
AOSP (Vanilla, GrapheneOS, CalyxOS) doesn't have this capability.

The Google Play Services app/package? Heh...

[ Parent | on HN ]