Re:The Coder Who Encrypted Your Texts
by ytdht on Thursday July 09, 2015 @11:35PM
(#9862167)
even if an Android application would communicate with others 100% securely, Google has wireless administrator privileges and can be served secret letters that can order Google to do anything, so technically they could log the data before it's encrypted.
[ Parent
| on HN ]
Will an I/O audit of the network interface will detect this?
No. How do you propose that it would?
I don't really know much about what kind of network chatter Android generates generally, but I imagine that, even if its encrypted, you can detect that there's suddenly network traffic to Google?
And then, depending on how silly the eavesdropping is, repeating the same message might cause the same encrypted payload to be transmitted?
traffic to Google is probably very common... and to be sure that you get the whole picture, you would probably need to intercept wireless signals going to the cellphone company which are also encrypted
Re:The Coder Who Encrypted Your Texts
by venomsnake on Friday July 10, 2015 @12:10AM
(#9862261)
Only if you have google services installed.
Without which TextSecure does not work.
Re:The Coder Who Encrypted Your Texts
by em3rgent0rdr on Friday July 10, 2015 @06:04AM
(#9863091)
But what about the fork https://github.com/SMSSecure/SMSSecure which can be installed on via f-droid google-less phone?
It has no push messages which means bad experience for non-SMS messages.