4 ms·
People are vetting Signal, so unless you are the target of a directed attack against you, you are better off. The Crypto AG phones were from a different era.
by jacobush 6y ago
People are vetting Signal, so unless you are the target of a directed attack against you, you are better off.
The Crypto AG phones were from a different era.
- x87678r 6y agoI'm pretty sure anything in the app store is crackable.
- burrows 6y agoWhat argument are you making? Putting something into the App Store somehow makes the app itself vulnerable? Or, the App Store tends to attract already vulnerable software?
- x87678r 6y agoProbably both. If the NSA thought it unbreakable, the app would not be easily available to the public.
- burrows 6y agoAn iOS backdoor is the way to go. Otherwise the NSA has to monitor an endless cycle of new apps.
- sudosysgen 6y agoNot if there is a backdoor added to all apps on the app store automatically.
- burrows 6y agoDo you imagine this backdoor gives control over each application's execution or only retrieves data?
- rolph 6y agohttps://en.wikipedia.org/wiki/FinFisher https://en.wikipedia.org/wiki/FinFisher << FinFisher malware is installed in various ways, including fake software updates, emails with fake attachments, and security flaws in popular software. Sometimes the surveillance suite is installed after the target accepts installation of a fake update to commonly used software.[2] Code which will install the malware has also been detected in emails.[17] The software, which is designed to evade detection by antivirus software, has versions which work on mobile phones of all major brands .>> no backdoor is needed when a users behaviour will let you in. it helps greatly when the service provider co-operates
- BlueTemplar 6y agoSignal is probably safe for the data[†], but as we know, the NSA cares even more about metadata – and since Signal's centralized servers are (all?) located in California… [†] - then, considering stuff like this, even vetted open source code might be at risk (remember that the NSA can afford the best programmers in the world !) : http://underhanded-c.org/ http://underhanded-c.org/ http://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf http://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thom...
- driverdan 6y agoThey don't care more about metadata, it easier for them to collect.
- lallysingh 6y agoIf you're worried about metadata, then you're probably best off publishing encrypted gists. Yes you have to poll to get the update, but it's better than getting hit by timing analysis.
- andreasley 6y agoWhat people? Vetting how? The problem remains: If you don't read and understand all the code (which is basically impossible for most people), then you have to trust some source of information, which in turn is based on some other source etc. In short: You can basically never know for sure if any complex product is completely secure. You can make guesses, and the more research you do, the closer you get to an answer. At some point, you have enough information to deem a solution "secure enough" for a specific use. For regular users, it's mostly a question of belief.