3 ms·
Our top political campaigns use Wickr (it's pushed down from on high) but I have a hard time believing it adds any more security than simply mandating 2fa secur
by dillondoyle 7y ago
Our top political campaigns use Wickr (it's pushed down from on high) but I have a hard time believing it adds any more security than simply mandating 2fa security keys w/ google advanced protection.
Given the problems ive experiences with the wickr app and lack of basic phone security ive seen this feels LESS secure to me.
Google put out research saying they had 0 successful phishing after mandated fobs. I guess there's a concern about forwards and that Wickr shows when someone screenshots but that doesnt stop anything...
I have seen lots of campaign staff that dont have passwords on their phone, or weak 4 digit ones. I use a password manager to store a long wickr pass but I think most just use a simple pass or re-use a password...
Wickr on my phone has render problems all the time and it has shown messages without me logging in at least twice.
It's also super inconvenient. if they really care about E2E - which doesnt even feel like the actual problem they are trying to fix (phishing/ability to read past messages when an account is compromised) - I'd rather have some enthusiastic outsiders develop an open source basic PGP chrome extension to sit on top of gmail or something (maybe that already exists)
- maqp 7y agoWickr is proprietary. That alone is a reason to abandon it ASAP.