News for hackers. Stuff that matters.
Re:More telcos confirm Salt Typhoon breaches as White House ... by nozzlegear on Tuesday December 31, 2024 @09:54PM (#42563602)
> and end-to-end encrypted their customers' data

Somewhat of a tangent: does anyone have any resources on designing/implementing E2E encryption for an app where users have shared "team" data? I understand the basics of how it works when there's just one user involved, but I'm hoping to learn more about how shared data scenarios (e.g. shared E2E group chats like Facebook Messsenger) are implemented.

Re:More telcos confirm Salt Typhoon breaches as White House ... by supriyo-biswas on Wednesday January 01, 2025 @12:01AM (#42564078)
You want to search for the "double rachet protocol", which brings up articles like this[1].

[1] https://nfil.dev/coding/encryption/python/double-ratchet-exa...

Re:More telcos confirm Salt Typhoon breaches as White House ... by nozzlegear on Wednesday January 01, 2025 @11:57AM (#42567264)
Exactly the kind of thing I was looking for, thank you! And thanks for the tip about "double ratchet protocol," that helps a ton.
Re:More telcos confirm Salt Typhoon breaches as White House ... by davidmurdoch on Tuesday December 31, 2024 @10:06PM (#42563640)
Matrix has a detailed write up intended for client implementers: https://matrix.org/docs/matrix-concepts/end-to-end-encryptio...

It should give you some ideas on how it's done.

Re:More telcos confirm Salt Typhoon breaches as White House ... by nozzlegear on Wednesday January 01, 2025 @10:57AM (#42566778)
Thanks! I've added it to my reading list.