5 ms·
This is a dangerous headline because it implies that Signal was broken, which could lead to people moving to LESS SECURE SERVICES because they think the more se
by scblock 10y ago
This is a dangerous headline because it implies that Signal was broken, which could lead to people moving to LESS SECURE SERVICES because they think the more secure one is broken. When in reality is the phone and OS.
They have similar end result for the phone in question, but headlines like this can lead to people being less secure on the whole.
- cmdrfred 10y agoIf people really require security from state level agencies perhaps they should read more than the headline.
- cloakandswagger 10y agoI'm sure someone savvy enough to use end-to-end encrypted communication channels will switch to less secure methods based off of a headline /s
- scblock 10y agoIt already happened with Whatsapp and the Guardian's irresponsible reporting. Organizers and protesters switching to unencrypted messaging or even SMS, because of the perception that Whatsapp was hacked. Someone savvy enough to use end to end encryption may be someone who values privacy, but there's not reason to assume they are also someone who is themselves a security expert. The point of apps like Whatsapp and Signal working to make end to end encryption easy for the average person is to increase encrypted messaging use, not make everyone a security expert.
- derefr 10y agoIt's not really that savvy people would be switching away; it's that non-savvy friends/family of savvy people who read this article now will have a slight negative connotation to those product names, so if their savvy friend/relative tries to convince them to switch to either of them, they might say no for stupid reasons. This is the point of the majority of propaganda, really: it's not to convince the people who know anything about the issue; it's to prejudice the people who don't, so that it'll be harder for the people in the know to communicate the facts to them.
- FabHK 10y agoIn particular because the App Store features not only the usual suspects (Skype, Allo, ...), but many other somewhat random apps (Gonzo, BabelNet, Kissapp, 5s, ...) promising encrypted chat, and people might think, "hmm, WhatsApp and Signal are insecure, it says so in the NY Times, so let's try one of these"
- deleted 10y ago[deleted]
- pg_is_a_butt 10y agoyou are implying that you are an idiot. you're all idiots.
- sqeaky 10y agoMost users cannot tell the difference between between the Phone, OS, App and the signal (Let alone an app named Signal). Likely the journalists work with tech savvy to make sure their understood this and it was hard for them to make sense of gigabytes of technical jargon and noise. Arguing this point at all is silly when many people, even many IT professionals don't know and don't care about the difference between bypassed and broken. This arguing detracts from the important news... The CIA sees fit to ignore the security of Americans by not alerting the companies that make the software the CIA exploits. They do this to insure they can hack whoever they want, and there is no meaningful oversight and no ethical, economic or constitutional consideration.
- sverige 10y agoAnd the bonus to the CIA ignoring the deal the Obama administration made with Big Tech to disclose vulnerabilities is that now (apparently) all of the tools the CIA had accumulated are out in the wild, instead of being fixed.
- sqeaky 10y agoI don't know why Obama allowed this, could he have had the CIA shut this stuff down he was the Chief Executive? I wonder what this administration will do with this knowledge. It will be interesting to see trump respond too, rather than manufacture news.
- sverige 10y agoFrankly, I am not sure if anyone in the White House has been able to truly control the intelligence agencies since the first Bush. And I say that only because he was a former CIA director, so he had a better chance of knowing where the control levers were hidden.
- deleted 10y ago[deleted]
- lvh 10y agoThat hardly matters if people's response is to use other, less secure things, as was the case with the Guardian and Whatsapp.
- acomar 10y agoI've had friends and family reaching out to me all morning saying "Signal is broken, see the NYT." This headline is incredibly misinformed and misleading and I hope they issue a correction quickly.
- ProAm 10y ago> because it implies that Signal was broken It does mean Signal is pointless to use however. Why encrypt if your communications are picked up prior to encryption? Akin to putting your seat belt on after the car has crashed.
- unethical_ban 10y agoNo, no, no! Defense in depth! Do you stop using TLS on your banking website every time a Windows 0day comes out?
- jacquesm 10y agoBecause your opponent might not be the CIA and because your phone might not be compromised. So in that case switching to something less secure will instantly make your problems worse.
- ProAm 10y agoOf course, Im only speaking in the context that you are worried about the CIA or other governments.
- jacquesm 10y agoEven if you are worried about them it still does not mean that you have been compromised. And if you do worry about them: don't use your phone (or any computer, for that matter) for sensitive stuff.
- ProAm 10y agoOf course, my original point was don't count on Signal to protect you. That was my whole point.
- cornholio 10y ago"Akin to putting your seatbelt knowing full well a thermonuclear attack is always possible." Yes, catastrophic compromise is possible, but that does not render all security measures moot. A precious few attackers have the capability for such attacks, they are very costly to develop and therefore very precious and well kept secrets, to be used on high profile targets. Unless you are a spy, a terrorist, a state official with significant power or a dissident against the likes of Russia or China, end-to-end encryption like Signal will keep your communication private.
- paradite 10y agoI don't think your argument about less secure services is helpful to layman. By arguing that Whatsapp is more secure, you are giving people a false sense of security. A good way to phrase it would be "all messaging services are equally vulnerable to these kind of attacks, regardless of encryption."
- mmrezaie 10y agoWell, it would be really dangerous if they have put a headline that did not make normal people not read it. I do not see this as click bait, and I see this as a usual signal for the mainstream to be aware. Also, if you these people read only the title, then the problem is not any sort of text, you should fix those people first. No matter what words were chosen they will most likely make the wrong judgment.