News for hackers. Stuff that matters.

A comment on Signal v7.0.0 with phone number privacy. Parent comment

Re:Signal v7.0.0 with phone number privacy by hobobaggins on Saturday February 17, 2024 @09:15PM (#39415496)
It's not really a bug. It's a design decision.

There's no clear solution for it from an encryption perspective without a big tradeoffs (like requiring all participants to be online at the same time).

Besides, the larger the group, the more likely that one of the nodes has been compromised anyway. Everything's a tradeoff -- don't depend on the security of a single solution if you're really trying to keep a secret; defense in depth.

[ Parent | on HN ]
Re:Signal v7.0.0 with phone number privacy by ianburrell on Saturday February 17, 2024 @11:11PM (#39416122)
You haven’t shown that this flaw is in Signal in addition to Matrix.

I heard about Matrix having that exact flaw, and if Signal had the same flaw, it would be big news. I remember Signal saying that they are not vulnerable.

[ Parent | on HN ]
Re:Signal v7.0.0 with phone number privacy by cpach on Sunday February 18, 2024 @04:01AM (#39417428)
If this was true I would expect there were additional sources besides a random anonymous HN comment.
[ Parent | on HN ]
Re:Signal v7.0.0 with phone number privacy by nicce on Sunday February 18, 2024 @06:11AM (#39418120)
It depends. One good discussion.

https://crypto.stackexchange.com/questions/77319/triple-diff...

[ Parent | on HN ]
Re:Signal v7.0.0 with phone number privacy by illiac786 on Sunday February 18, 2024 @02:55PM (#39422491)
That is also valid for 1:1 chats, not specific to groups. It says "if you don't check the key if the remote party via a secondary channel you are vulnerable to MITM attack of the server is owned"

Which is obvious, every single E2EE encryption tool which is centralised is susceptible to it, but I would wager that decentralised too, although maybe harder to realise.

[ Parent | on HN ]
Re:Signal v7.0.0 with phone number privacy by wkat4242 on Sunday February 18, 2024 @01:38PM (#39421705)
> There's no clear solution for it from an encryption perspective without a big tradeoffs (like requiring all participants to be online at the same time).

I wonder if that's why Telegram's secret chats do in fact require users to be online at the same time for key exchange. I've used it before and I had to wait a while for the other party to come online.

[ Parent | on HN ]