4 ms·
Aside from the obvious flaws (Threema isn't secure: https://breakingthe3ma.app/ https://breakingthe3ma.app/), this is LARPing: the author wants to keep his chat
by snotrockets 4y ago
Aside from the obvious flaws (Threema isn't secure: https://breakingthe3ma.app/ https://breakingthe3ma.app/), this is LARPing: the author wants to keep his chats secret, but he doesn't discuss why and from whom. This is amateurish, as your efforts should be defined by the threat model, not the other way around. How much effort is your attacker capable of? How much effort are you willing to spend on opsec, a notoriously hard and inhuman task?
There's a whole difference if you want to keep your affair secret from your wife, your small-time weed dealing from the police, your spy ring from the FBI, coordinating anti-Russian attacks in Ukraine, or a Chinese resident resisting the regime.
- rgrmrts 4y agoThe author is simply sharing their preferred messaging apps, and they describe the criteria used. Sure it's not an objective in-depth security analysis or a result of professional audits but it's also not claiming to be those things, right?
- generalizations 4y agoUnderstanding the threat model isn't an "in-depth security analysis", though. It's just a matter of understanding why you care about secure apps - who you want to be secure from. If you don't know that, then these are just toys, and you're just playing.
- detrites 4y agoGreat! Some of us like play.
- __derek__ 4y agoThe introduction implies some level of security analysis based on the list of "criteria" (e.g., "does not expose personal information" and "does not leak data") and the "testing setup" link.
- snotrockets 4y agoDoes not expose to whom? Leak to whom?
- __derek__ 4y agoThat's exactly my point. Ask the author. They implied that they did some analysis beyond trusting claims made my developers, but there aren't sufficient details.
- deleted 4y ago[deleted]