4 ms·
If Snapchat is serious about its users' private messages, it should be implementing the Axolotl protocol for end-to-end encryption (what TextSecure uses, too).
by higherpurpose 12y ago
If Snapchat is serious about its users' private messages, it should be implementing the Axolotl protocol for end-to-end encryption (what TextSecure uses, too). But Snapchat isn't serious about it, as we've seen in several securiy/privacy scandals involving the company so far, so I'm not going to hold my breath for this.
https://whispersystems.org/blog/advanced-ratcheting/ https://whispersystems.org/blog/advanced-ratcheting/
Pro tip for future chat app start-ups promising "security" or "privacy" or as the latest trend goes, "anonymity" for their users. If you can't really hold your end of the bargain, don't do it! Promise cute emoticons or whatever, instead. Hopefully there will be some class action lawsuits against companies like Snapchat, soon. They need to learn their lesson.
- meowface 12y agoYou don't quite understand. The threat model here is "a Snapchat user copying/saving a Snapchat image they receive", not TextSecure's threat model of "a third party observer or man in the middle". Implement whatever protocol you like, it doesn't matter; a user who roots his own device will be able to do whatever he likes to data stored on that device.