4 ms·
Does "initial funding by the US Government" really matter? Tor was funded by the US Government and it at least looks like they struggle to break it. The phone
by cmeacham98 4y ago
Does "initial funding by the US Government" really matter? Tor was funded by the US Government and it at least looks like they struggle to break it.
The phone number requirement is asinine and the reason I use Matrix, as I refuse to tie any identity of mine (even those I don't care about keeping private) to a phone number. Has Signal never heard of SIM swapping?
- cpach 4y ago“Has Signal never heard of SIM swapping?” Of course they have. Signal also has opt-in protection for that.
- cmeacham98 4y agoSo by default Signal accounts are vulnerable to a known security issue? Great design!
- cpach 4y agoAre you aware of any secure messaging systems where no trade-offs where made? If so, please let us know.
- pydry 4y ago>it at least looks like they struggle to break it. Do they? Their FAQ basically says that if your adversary is a nation state we aint gonna be much help. I think they focus much more on anonymizing against ISPs and have basically thrown the towel in on defending against, say, correlation attacks by nation states.
- room505 4y agoMy family has been using Threema, which doesn't require a phone number.
- cmeacham98 4y agoProprietary? No thanks. Even Signal open-sources their client.
- Grumbledour 4y agohttps://github.com/orgs/threema-ch https://github.com/orgs/threema-ch
- room505 4y agoI'm not sure what is proprietary...https://threema.ch/en/open-source https://threema.ch/en/open-source
- cmeacham98 4y agoOops ... :/ I can't edit my comment to correct it now, but in my defense Wikipedia says it's proprietary
- indigochill 4y ago> and it at least looks like they struggle to break it. As I understand, that depends entirely on where you stand on the theory that the US government owns most of the exit nodes. That said, the practical threat profile for most people is lower-level criminals and advertisers, so Tor is probably still a good idea in any case.
- cmeacham98 4y agoOk, but we can agree that doesn't seem to be a designed-in defect, right? The fact they took funding from the US doesn't seem to have ultimately mattered for the answer to this question.