News for hackers. Stuff that matters.
Re:The Practical Limitations of End-to-End Encryption by pyuser583 on Tuesday March 25, 2025 @01:00PM (#43473475)
That was a lot more than a secure messaging app. It was an entire Android-based operating system, preinstalled on physical devices.

It was originally created by a private company, that went a bit too far in marketing it to criminals. Undercover agents asked the CEO "How do I use this to prevent the police from monitoring my drug smuggling", and he answered the question.

In order to keep the feds from throwing them in prison, the remaining execs needed to provide names, and what better way than to compromise the phone and market it to criminals?

Around the same time, law enforcement cracked a more popular custom phone used by criminals, so gangs started looking elsewhere. And the FBI was waiting for them.

It was an insane operation. It was being run from a local FBI office (San Diego), not headquarters. A bunch of low level agents.

But it provided massive police intelligence around the world.

It also screwed over a lot of the contractors who worked on it. The Android developers who designed the phone are now on organized crime's radar, even though they thought they were just making a secure phone.

Re:The Practical Limitations of End-to-End Encryption by 0cf8612b2e1e on Tuesday March 25, 2025 @01:33PM (#43473808)
I heard this story elsewhere, and the attitude of law enforcement infuriated me. It was basically, “Only criminals would care about their privacy to purchase this premium phone, so of course we needed to crack it”. Screw everyone else who did not want more ad tracking or whatever.
Re:The Practical Limitations of End-to-End Encryption by pyuser583 on Tuesday March 25, 2025 @03:04PM (#43474635)
Law enforcement was paranoid about making sure it only went to criminals. It was producing so much intelligence, any non-criminal usage wasted lots of time.

The fact that it was really only criminals using it was the big selling point.

Re:The Practical Limitations of End-to-End Encryption by proxynoproxy on Tuesday March 25, 2025 @01:53PM (#43474000)
I agree in part, but nobody legit is paying $200/month to use signal or other free secure private messengers. If it was a free platform I can see innocents getting caught, but considering it was sold by criminals, to criminals for a criminal fee — I think they were mostly correct.
Re:The Practical Limitations of End-to-End Encryption by 0cf8612b2e1e on Tuesday March 25, 2025 @03:08PM (#43474674)
Granted I’m hazy on the details of the story, but I did not recall a service fee. Just a few hundred dollars premium Android phone geared towards secure privacy. Sure, there was a nudge and a wink towards crime, but I could easily see it appealing to a civil protestor, journalist, or philanderer.
Re:The Practical Limitations of End-to-End Encryption by pyuser583 on Tuesday March 25, 2025 @03:10PM (#43474701)
It was only available from a salesman, you couldn't order it via a website. The salesmen knew their clients, and knew they were criminals.

The sales chain was what made the operation so effective. The only people who had the phones were the ones the FBI wanted with the phones.

Re:The Practical Limitations of End-to-End Encryption by johnisgood on Tuesday March 25, 2025 @02:43PM (#43474442)
But there are many open source, free, and actually secure messengers...
Re:The Practical Limitations of End-to-End Encryption by pyuser583 on Tuesday March 25, 2025 @03:08PM (#43474676)
not in the late 2010s when this was happening.
Re:The Practical Limitations of End-to-End Encryption by johnisgood on Tuesday March 25, 2025 @03:14PM (#43474754)
There was (is) one though, audited by NCC Group in 2015. A vuln has been found but fixed by 2016. Not sure about other messengers.