News for hackers. Stuff that matters.

A comment on Leaked phone number of Mark Zuckerberg reveals he is on Signal. Parent comment

Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by Karsteski on Tuesday April 06, 2021 @02:21AM (#26708586)
How so? I don't find it violating in any way that someone knows that I'm using a messenging app due to my phone number. They aren't exactly private in the first place.

It would be the same if there were usernames, although those would be far harder to assign to a person. Thankfully, Signal is working on that feature and hopefully it's released soon. I'd like to one day not have any phone number at all. It's a system that feels very much antiquated...

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by deepstack on Tuesday April 06, 2021 @02:27AM (#26708627)
https://app.wire.com already has that feature and it is based on signal protocol.
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by arkadiyt on Tuesday April 06, 2021 @02:53AM (#26708836)
Wire uses MLS [1], it has nothing to do with the Signal protocol.

[1]: https://messaginglayersecurity.rocks/

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by sdfzug on Tuesday April 06, 2021 @04:40AM (#26709530)
afaik Wire works on MLS like many others do - but according to Wikipedia Wire uses the Signal Protocol. Your "source" does not back up your claim
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by creata on Tuesday April 06, 2021 @04:57AM (#26709640)
I just read the Wikipedia page and it says, emphasis mine:

> Wire's instant messages are encrypted with Proteus, a protocol that Wire Swiss developed based on the Signal Protocol.

That doesn't sound like "Wire uses the Signal Protocol" to me.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by uoaei on Tuesday April 06, 2021 @02:34AM (#26708670)
Has it been audited by external, independent security researchers?
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by AvocadoCake on Tuesday April 06, 2021 @06:33AM (#26710238)
https://wire.com/en/security/#audits

Yes, with published reports, but it looks like they haven't published new ones in a few years.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by Bancakes on Tuesday April 06, 2021 @02:37AM (#26708693)
Yes, it's open source and anyone can look at the source code instead of appealing to authority.
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by uoaei on Tuesday April 06, 2021 @02:40AM (#26708728)
That's not what I asked. Generally laypeople are not going to be good judges of whether or not an encryption protocol is sufficiently secure.

Has it been audited by security researchers?

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by Bancakes on Tuesday April 06, 2021 @02:44AM (#26708760)
You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? To answer your question, I don't know if Wire's been audited by paid researchers. I personally prefer a customer-exposed product whose each commit you can look up rather than the remote promise of security in a locked and hidden program.
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by saagarjha on Tuesday April 06, 2021 @07:08AM (#26710445)
> You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs?

This is usually a good assumption.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by hashhar on Tuesday April 06, 2021 @02:50AM (#26708816)
Why can't it be both?

Bitwarden is open-source (both the server and clients) AND has been independently audited for a security review.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by uoaei on Tuesday April 06, 2021 @04:05PM (#26716727)
It is not impossible to create code which looks like it does one thing while simultaneously doing ya-mother.

http://underhanded-c.org/

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by gsich on Tuesday April 06, 2021 @07:37AM (#26710640)
"look" is a weak word. Anyone with eyes can look.
[ Parent | on HN ]