News for hackers. Stuff that matters.
Re:700M users and Premium by lxgr on Sunday June 19, 2022 @05:44PM (#31803837)
> Pretty much no one does any sort of identity verification anyway on any E2EE messaging system. So that means that the people running the servers can MITM if they feel like it to get the content.

The fact that anybody can verify keys raises the stakes of attempting a MITM attack significantly and thus protects the majority that doesn't verify keys themselves.

Re:700M users and Premium by upofadown on Sunday June 19, 2022 @07:14PM (#31804444)
Sure it is a good feature to have, but this sort of attack is going to be targeted. You don't do it to everyone. In the unlikely event you do get caught then you can act dumb in almost all cases. Blame Pegasus or whatever...
Re:700M users and Premium by lxgr on Sunday June 19, 2022 @07:21PM (#31804492)
I have no illusions about being able to keep a nation state attacker off my devices, but not having all of my correspondence shared with all kinds of third parties by default sure feels nice.
Re:700M users and Premium by vinay_ys on Monday June 20, 2022 @06:37AM (#31808637)
Don't forget anonymity with temporary/throwaway devices and handles combined with E2EE PFS protocols can be very powerful to thwart such surveillance.
Re:700M users and Premium by gruez on Sunday June 19, 2022 @08:30PM (#31804950)
Except that if your target finds out, it would undoubtedly increase their paranoia level, making future attacks against him harder and compromising future operations. There's a reason why law enforcement keeps wiretap warrants sealed.