News for hackers. Stuff that matters.

999ear-pure

Re:Reviewing the Cryptography Used by Signal on Tuesday February 18, 2025 @10:01AM (#43090267)
Didn't they intentionally take down other Signal clients from Google Play? Although to play devils advocate they seem to have stopped being so aggressive. Still scary and concerning.
Re:Reviewing the Cryptography Used by Signal on Tuesday February 18, 2025 @10:00AM (#43090251)
OMEMO was modeled around Signals encryption. And I don't think being "respected" makes a persons statement less or more worthy, assuming we don't take into account this same individual failed to follow responsible disclosure and intentionally harassed aswell as spread FUD about the Matrix project. Something which has been audited by Ukraine, France and other reputable organisations.
Re:Reviewing the Cryptography Used by Signal on Tuesday February 18, 2025 @09:57AM (#43090215)
With XMPP I can run (and audit) eveything myself. You can't do this with Signal. Some proprietary messenger that's hostile to 3rd party clients aswell as also wanting my phone number will never compete with tried and tested open source technology like XMPP. There is a reason military and government orgs use their own infrastructure.
Re:Reviewing the Cryptography Used by Signal on Tuesday February 18, 2025 @09:44AM (#43090030)
Signals threat model is fundamentally flawed. If you distrust Signal infrastructure and need E2E to secure yourself then having a closed client from Google Play or App Store in direct control of the developers ensures nothing. XMPP is much more safe and reliable and uses the same encryption technology as Signal, or even Telegram as it allows non-official clients that also support E2E. Signal is useless. That and the fact Signal doesn't even run on some devices, whereas XMPP or Telegram usually will.