4 ms·

The message can't be intercepted in transit, since we are talking about spyware, I assume they get it from the device, hard to defend against that if they have

by thmsths 8mo ago

The message can't be intercepted in transit, since we are talking about spyware, I assume they get it from the device, hard to defend against that if they have access to your process' memory space.

Hamuko 8mo ago
Surprising that end-to-end encryption doesn't really matter when you get into one of the ends.
- akimbostrawman 8mo ago
  not at all. there is no encryption that can save you when one of the legitimate participants is somehow compromised. doesn't even need to be a sophisticated device compromise, literal shoulder surfing does that too.
  - moralestapia 8mo ago
    [flagged]
    - coldtea 8mo ago
      The parent said "it's surprising". It's not surprising.
      - Talanes 8mo ago
        You're correct in the literal sense that they did say those words, but the entire comment clearly demonstrated a lack of surprise that reveals the opening words to be intended ironically.
- ASalazarMX 8mo ago
  Even if you had to input your private key every time you wanted to read or send a message, having malware in your phone voids practically any form of encryption, because it has to be decrypted eventually to be used.
moralestapia 8mo ago
>The message can't be intercepted in transit Lol, so like ... all encryption schemes since the 70s?
- sowbug 8mo ago
  They do have stronger schemes, which are called hash functions.
  - moralestapia 8mo ago
    What? Hashing is not encrypting. You can learn more about the topic here, https://www.okta.com/identity-101/hashing-vs-encryption/ https://www.okta.com/identity-101/hashing-vs-encryption/
    - p-o 8mo ago
      Hashing is a part of encryption, maybe you are the one who needs to shore up on the topic?
      - aipatselarom 8mo ago
        Nice try. However, hashing and encryption are two different operations. Load this page, https://en.wikipedia.org/wiki/Advanced_Encryption_Standard https://en.wikipedia.org/wiki/Advanced_Encryption_Standard Ctrl-F "hash". No mention of it. Before being pedantic at least check out the url in that comment to get the basics going.
        sowbug 8mo ago
        This entire thread should be annihilated, but since you mentioned being pedantic... You're correct that a pure encryption algorithm doesn't use hashing. But real-world encryption systems will include an HMAC to detect whether messages were altered in transit. HMACs do use hash functions.
      - AlotOfReading 8mo ago
lmm 8mo ago
Certainly very hard to defend against that when the messenger you're using won't let you use a device you control.

by thmsths 8mo ago

The message can't be intercepted in transit, since we are talking about spyware, I assume they get it from the device, hard to defend against that if they have access to your process' memory space.

Hamuko 8mo ago

Surprising that end-to-end encryption doesn't really matter when you get into one of the ends.

akimbostrawman 8mo ago
not at all. there is no encryption that can save you when one of the legitimate participants is somehow compromised. doesn't even need to be a sophisticated device compromise, literal shoulder surfing does that too.
- moralestapia 8mo ago
  [flagged]
  - coldtea 8mo ago
    The parent said "it's surprising". It's not surprising.
    - Talanes 8mo ago
      You're correct in the literal sense that they did say those words, but the entire comment clearly demonstrated a lack of surprise that reveals the opening words to be intended ironically.
ASalazarMX 8mo ago
Even if you had to input your private key every time you wanted to read or send a message, having malware in your phone voids practically any form of encryption, because it has to be decrypted eventually to be used.

moralestapia 8mo ago

>The message can't be intercepted in transit Lol, so like ... all encryption schemes since the 70s?

sowbug 8mo ago
They do have stronger schemes, which are called hash functions.
- moralestapia 8mo ago
  What? Hashing is not encrypting. You can learn more about the topic here, https://www.okta.com/identity-101/hashing-vs-encryption/ https://www.okta.com/identity-101/hashing-vs-encryption/
  - p-o 8mo ago
    Hashing is a part of encryption, maybe you are the one who needs to shore up on the topic?
    - aipatselarom 8mo ago
      Nice try. However, hashing and encryption are two different operations. Load this page, https://en.wikipedia.org/wiki/Advanced_Encryption_Standard https://en.wikipedia.org/wiki/Advanced_Encryption_Standard Ctrl-F "hash". No mention of it. Before being pedantic at least check out the url in that comment to get the basics going.
      - sowbug 8mo ago
        This entire thread should be annihilated, but since you mentioned being pedantic... You're correct that a pure encryption algorithm doesn't use hashing. But real-world encryption systems will include an HMAC to detect whether messages were altered in transit. HMACs do use hash functions.
    - AlotOfReading 8mo ago

lmm 8mo ago

Certainly very hard to defend against that when the messenger you're using won't let you use a device you control.