News for hackers. Stuff that matters.
Re:Wire – Modern Communications Network by kristofferR on Wednesday December 03, 2014 @04:28AM (#8692683)
I really disagree. There's simply no good secure cross-platform messaging app available.

Telegram has fantastic clients on all the platforms, but isn't secure. TextSecure is secure, but has only a mediocre app on a single platform (Android). The other alternatives are even worse.

Tox is looking really promising though: https://wiki.tox.im/FAQ

Re:Wire – Modern Communications Network by lewispb on Wednesday December 03, 2014 @04:35AM (#8692710)
WhatsApp is starting to implement TextSecure technology in it's cross-platform apps and has 600m users.

http://www.bbc.co.uk/news/technology-30114346

Re:Wire – Modern Communications Network by kristofferR on Wednesday December 03, 2014 @04:37AM (#8692718)
Yeah, but WhatsApp isn't actually cross platform. It's only on mobile devices.

And the article you linked points out several times that the encryption is only going to be enabled for WhatsApp's Android client for the time being.

Re:Wire – Modern Communications Network by aw3c2 on Wednesday December 03, 2014 @06:39AM (#8693144)
It is still a closed source application that I do not trust.
Re:Wire – Modern Communications Network by e12e on Wednesday December 03, 2014 @08:19AM (#8693561)
I'm not sure I understand what you mean by "cross-platform app". Sounds like a contradiction in terms, to me.

We have XMPP and OTR, and with chatsecure on Android or various clients on Linux it's pretty pleasant. I believe there are a few OS X clients as well, not sure about iOS.

Re:Wire – Modern Communications Network by Pamar on Wednesday December 03, 2014 @04:41AM (#8692740)
What about Threema? (https://threema.ch/en)
Re:Wire – Modern Communications Network by kristofferR on Wednesday December 03, 2014 @04:45AM (#8692760)
It's not cross-platform unfortunately, it's only on mobile devices.
Re:Wire – Modern Communications Network by lmedinas on Wednesday December 03, 2014 @06:38AM (#8693140)
tbh I trust on Threema the same way I trust on Whatsapp or any other client which promises encryption.

Threema is closed sourced and thus I don't know which/how encryption are they actually using.

Re:Wire – Modern Communications Network by bugsbunny123 on Wednesday December 03, 2014 @04:31AM (#8692689)
Telegram isn't secure? Source please.
Re:Wire – Modern Communications Network by hucker on Wednesday December 03, 2014 @04:34AM (#8692705)
http://www.cryptofails.com/post/70546720222/telegrams-crypta...

Also, messages are not encrypted by default, and there is afaik no way to encrypt group chats. You have to create a special "secret" chat for the messages to be encrypted.

Re:Wire – Modern Communications Network by jhasse on Wednesday December 03, 2014 @05:03AM (#8692818)
All messages are encrypted by default, but not client-client (in order to make cloud sync work): https://telegram.org/faq#q-why-not-just-make-all-chats-secre...
Re:Wire – Modern Communications Network by kristofferR on Wednesday December 03, 2014 @05:26AM (#8692899)
It is possible to create synced messages without depending on a server decrypting the messages. Here's how Tox is going to implement that: https://github.com/Quoturnix/ProjectTox-Core/wiki/Multiple-d...
Re:Wire – Modern Communications Network by jhasse on Wednesday December 03, 2014 @05:35AM (#8692930)
True, but Tox requires a password for that. Telegram tries to be an alternative to WhatsApp so forcing people to sign up with an account isn't an option.
Re:Wire – Modern Communications Network by furyg3 on Wednesday December 03, 2014 @04:34AM (#8692706)
It's the other way around. Messaging apps need to demonstrate their own security by releasing the source code.

So far only TextSecure does this.

Re:Wire – Modern Communications Network by eps on Wednesday December 03, 2014 @05:50AM (#8692974)
One doesn't demonstrate security by releasing the source.

One needs to have source released, audited and verified to match prebuilt binaries that are actually used by the unwashed gray masses. Without all three checked for each public build you have zero assurance that you are running a binary built from the released source and that the source doesn't have anything fishy in it.

The only app that checks all three, somewhat ironically, is TrueCrypt. PGPfone checked #1 and #3. TextSecure checks just #1 unless I am missing something, so objectively its "demonstrated security" is exactly the same as that of any another app that simply describes what it does in plain English and has a traffic to prove it.

Re:Wire – Modern Communications Network by kissickas on Wednesday December 03, 2014 @12:34PM (#8695074)
The Truecrypt audit still hasn't been finished yet, has it?
Re:Wire – Modern Communications Network by jhasse on Wednesday December 03, 2014 @05:04AM (#8692825)
Telegram's client code is also open source.
Re:Wire – Modern Communications Network by b3tta on Wednesday December 03, 2014 @04:35AM (#8692708)
Re:Wire – Modern Communications Network by JonoBB on Wednesday December 03, 2014 @04:37AM (#8692720)