4 ms·
The encryption protocols available haven't been the weak link for some time, no one cracks the messages in transit; you just go for the endpoint. If you can hac
by jazzyjackson 3y ago
The encryption protocols available haven't been the weak link for some time, no one cracks the messages in transit; you just go for the endpoint. If you can hack the OS and exfiltrate screenshots it doesn't matter how secure your app or network channel is.
The only approach that's given me hope has been Tin Foil Chat, isolating the keychain from the network. Me and some fellow noisebridgers built a kind of cyberdeck prototype implementing this but couldn't find much interest in commercializing it. Since the input stage is isolated from output, you can't copy paste any public keys but have to enter them manually (448bits as 56 characters) and messages/attachments can't be forwarded. Juice wasn't worth the squeeze overall. We'll see if there's a milder approach here but I don't see anyway to get around the endpoint security.
https://github.com/maqp/tfc https://github.com/maqp/tfc
- rapsey 3y agoYeah you're not going to make a business out of it. Secure messaging is a big graveyard of companies.
- weinzierl 3y agoAt least not a legal one...
- jazzyjackson 3y agoEven marketing to criminals is a tough sell, no reason to believe we weren't a 3 letter cutout: > An encrypted chat platform that catered to criminals is actually an FBI sting operation. > Since 2019, the FBI has been secretly operating Anom, a company that pretended to offer encrypted messaging to criminal organizations. In reality, the Anom app would relay to federal investigators a copy of every message sent. https://www.pcmag.com/news/fbi-sold-criminals-fake-encrypted-phones-that-actually-copied-their-messages https://www.pcmag.com/news/fbi-sold-criminals-fake-encrypted... (this is also in the TFC FAQ as why not to sell a device, trust is not solved by cryptography alone)
- rozab 3y agoThis has happened many, many times in various countries. At the end of the day I don't think anyone else in the space would be able to compete on price with the various 3 letter agencies
- rvnx 3y agoanother case: https://en.wikipedia.org/wiki/Crypto_AG https://en.wikipedia.org/wiki/Crypto_AG
- fragmede 3y agoWickr was sold to AWS for an undisclosed amount of money, so we don't actually know if it's a graveyard or if it was a life-changing amount of money for the founders, or somewhere in between.
- deleted 3y ago[deleted]
- n4r9 3y agoThe goal appears to be protecting against monetisation, rather than state-level hacking.
- bheadmaster 3y agoUse a camera and QR codes to transfer information instead of manual input, it would be much more viable. You could use any chat application that supports images as a transport laye.