3 ms·
This is a mistake. They should at least compile their own version and not something that comes from an US based app store under US law. At any point the US can
by sschueller 7y ago
This is a mistake. They should at least compile their own version and not something that comes from an US based app store under US law. At any point the US can force a change.
This is as secure as purchasing a machine from Crypto AG. [1]
[1] https://en.wikipedia.org/wiki/Crypto_AG https://en.wikipedia.org/wiki/Crypto_AG
- cpach 7y agoPerhaps a better idea would be to fund an audit of the Signal app. (Or has that been done already?)
- pgeorgi 7y agoDoesn't help figure out if the signal update of the day that comes from the store is any good.
- cpach 7y agoThat is true. But given how much interest there is to find vulnerabilities in the Signal app, I would be very surprised if anyone would succeed in putting up a compromised Signal app on the App store and also be able to fly under the radar.
- hu3 7y agoAn audit would only prove that the current code is secure.
- Blaiz0r 7y agoIt's not as though staff will be installing it from the App store on their phones.
- pergadad 7y agoThis is for external communications for any case people would most likely be using WhatsApp. It's not for official, internal or classified stuff.
- patrickaljord 7y agoThe OS is US based too and they could easily keylog everything. Even if you wipe out the OS for a self-compiled one, there are blobs running full blown OS in the hardware and it has access to every single hardware resource, good luck getting rid of that one without building your own hardware and drivers from scratch.
- zrm 7y ago> good luck getting rid of that one without building your own hardware and drivers from scratch. For an individual that is obviously infeasible. For the continent of Europe as a whole, it obviously isn't. Why shouldn't they put some money into developing cellphone hardware with open source drivers?
- patrickaljord 7y agoThe size of the supply chain required for such an endeavor is so huge and spread among various countries and companies worldwide this would be a big task even for the EU. I mean, competing with the like of Broadcom and ARM from scratch. Good luck with that. Even then, the NSA would just need to pay or blackmail a single entity in the supply chain to get their backdoor in there. The EU itself would probably implement their own backdoor. Also open source doesn't mean it will be backdoor free https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_tried_to_backdoor_linux_three_times/ https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_t...
- zrm 7y agoYou don't have to refuse to take an ARM license (although RISC-V is also a thing). You may not even have to design your own chips at all -- they could just pay an existing manufacturer for design specifications and then both audit the design and develop and publish open source firmware for it. Supply chain security is an independent problem. First you have to know exactly what the design is supposed to be, only then can you verify that it actually is.
- benschulz 7y agoGiving this advice has almost no cost and, at least arguably, it is better for staff to use Signal than other messengers. So, IMHO, this is good advice.
- throwawaylolx 7y agoNot if the staff is lured by all the E2EE promises and all the lock icons to overestimate the security of the app and share more information than they would otherwise.
- zrm 7y agoNot using something that actually improves security because people might think that it actually improves security is a crappy argument. If your phone is insecure for two separate reasons you should fix both of them instead of using each as an excuse not to fix the other.
- Avamander 7y agoYeah, but the fix should be using Matrix, not Signal. IMHO
- StavrosK 7y agoDoes F-Droid support signed releases, and does Signal sign their APKs? In fact, aren't all APKs signed?
- berkes 7y agoSignal is not on F-Droid, because m0xie does not want that[1]. Some forks of Signal are, though[2]. [1] https://community.signalusers.org/t/how-to-get-signal-apks-outside-of-the-google-play-store/808/24 https://community.signalusers.org/t/how-to-get-signal-apks-o... [2] https://forum.f-droid.org/t/signal-in-f-droid-in-2018/2847 https://forum.f-droid.org/t/signal-in-f-droid-in-2018/2847
- lxgr 7y agoSignal provides reproducible builds these days: https://signal.org/blog/reproducible-android/ https://signal.org/blog/reproducible-android/ Not sure how feasible this is on iOS (with Bitcode).
- seppin 7y agoCrypto AG was an intel op the entire time. Where is your proof Signal works for and is owned by the American government?