3 ms·
They didn't backdoor it. It was back in 2013 when they were new. Everyone was going "whoa, your encryption is weird" and they were defending themselves by sayin
by bjoli 6y ago
They didn't backdoor it. It was back in 2013 when they were new. Everyone was going "whoa, your encryption is weird" and they were defending themselves by saying "we have 6 world champion programmers".
Anyways, something like 6 months after launch a Russian guy found that they were seeding their secret chat keys with entropy from the server, meaning the server could trivially MITM any secret chat. Pretty embarrassing.
Iirc it got quite little publicity since most of the discussion was in Russian, and the disclosure was in a forum post in an obscure forum.
- ryanlol 6y agoIf you look at their implementation the balance of probabilities definitely leans heavily towards “backdoor” rather than “not a backdoor”. You aren’t going to find any cryptographers anywhere who’d be willing to repeat your “They didn’t backdoor it” lie. If it looks like a backdoor, swims like a backdoor, quacks like a backdoor, then it probably is a backdoor.