5 ms·
Hoping more and more people start to show their support for services such as this one by joining and bringing friends. They are running circles around Signal la
by Propen 9y ago
Hoping more and more people start to show their support for services such as this one by joining and bringing friends. They are running circles around Signal lately.
- zedred 9y agoI was hopeful at first. A large VC funded company with a big full time team should run circles around a small open source effort, but their security is still way behind Signal. I was also quickly put off by their "less than honest" marketing.
- walterbell 9y agoCould you share details on "security is still way behind Signal"? Edit: found previous discussion, https://news.ycombinator.com/item?id=13132157 https://news.ycombinator.com/item?id=13132157
- zedred 9y agoI haven't directly explored the source for either in little while, so I should take a new look. I might be a little out of date, but the things that I have seen second hand recently confirmed my earlier conclusions. Like I recently saw an announcement from Wire that calls are now secure, but they had been advertising them as secure all along! I had even spent time looking through the code but didn't know that calls weren't authenticated. Now are they really secure? I don't know, they said that before too, and the source is so hard to follow. Then I saw a post that showed they weren't even doing cert pinning, which is so basic. I wanted to like it, but the more I looked the more I felt like "security" was just sprinkled on as an after thought.
- walterbell 9y agoDid you see that they implemented CBR for audio calls and submitted patches to both Signal and WebRTC? https://medium.com/@wireapp/call-security-constant-bit-rate-encoding-and-improving-webrtc-a85be6caa43a https://medium.com/@wireapp/call-security-constant-bit-rate-...
- JshWright 9y agoIn 2017... CBR has been a thing in secure calling apps for ~5 years now.
- walterbell 9y agoCan you recommend some iOS/Android apps which support CBR?
- JshWright 9y agoSilent Phone is both Android and iOS compatible, and we have used CBR codecs since we launched (in 2012).
- walterbell 9y agoThanks for the pointer ($10/month), did not know this was available without buying a Blackphone.
- Siimteller 9y agoCare to name one?
- JshWright 9y agoSilent Phone (disclosure: I am an employee)
- Propen 9y agohttps://techcrunch.com/2017/02/10/messaging-app-wire-now-has-an-external-audit-of-its-e2e-crypto/ https://techcrunch.com/2017/02/10/messaging-app-wire-now-has...