3 ms·
If you need to ask this question then you don't have the skills to verify that your device is running a secure protocol even if I handed you the source code. T
by evgen 10y ago
If you need to ask this question then you don't have the skills to verify that your device is running a secure protocol even if I handed you the source code. There are people out there who do have the skills, and you can be certain that they will be reverse-engineering the distributed binaries as soon as possible. I would be extremely surprised if there was not a lightning talks or two at DefCon or BH this year going over the actual on-device code and how closely it hews to the known protocol.
- moxie 10y agoWe've verified that FBM is using the unmodified open source Signal Protocol libraries we distribute at open whisper systems. Hopefully others will verify the same!
- em3rgent0rdr 10y agoOK, I'll wait for independent verification, thanks!
- wmccullough 10y agoI'd pretty much call the creator of the Signal protocol an independent verification. It's not like he's employed by Facebook.
- nileshtrivedi 10y agoCan you share the steps so that more people can do this? What exactly should we look for?