4 ms·
> Allegedly WhatsApp uses Signal's encryption (OpenWhisper About the partnership: https://signal.org/blog/whatsapp-complete/ https://signal.org/blog/whatsapp-c
by e12e 7y ago
> Allegedly WhatsApp uses Signal's encryption (OpenWhisper
About the partnership:
https://signal.org/blog/whatsapp-complete/ https://signal.org/blog/whatsapp-complete/
But of course, in this case the issue seems to be either compromise of the device(s) via zero days, whatsapp usage simply being the target matrix - and/or a leveraging a zero day in whatsapp for full device compromise.
It's unlikely signal would be immune - they didn't Crack the encryption, they cracked the app/os.
In olden times the vector might have been a font, or a gif.
The only advantage signal has is a conservative interface and small userbase. I'm not sure if they do some kind of hard-line whitelisting of attachments though - if you can pack an exploit as a file, I'm pretty sure you could send it via signal.
- tal8d 7y ago> The only advantage signal has is a conservative interface and small userbase. Signal is open source, WhatsApp is not. So how did you determine Signal has only one advantage over WhatsApp, without access to the WhatsApp source code?
- e12e 7y agoAdvantage in terms of security vulnerabilities - evidence seems to indicate that having the source code available isn't a big factor in reducing zero days. In addition, signal isn't any more protected against a rooted device. Nothing seems to indicate a back door here.