Hey /g/entiles, Is Signal safe as a messenger? Is there any

Facebook messenger :3

The situation with Signal is weird. Yes, it is potentially the most secure chat client normal people can use. But...there's a problem. It uses Google Cloud Messaging. There was a fork called LibreSignal which used Websockets, but the dev didn't approve of it, since they were using the Signal name, and HIS servers. Also, F-Droid isn't the most secure thing out there, so the dev pulled it out of there, too.

The fork is still out there, and it's actively updated, by the way.

https://fdroid.eutopia.cz/

File: Alfons_Mucha_painting.jpg (40KB, 260x346px) Image search: [Google]

40KB, 260x346px

>>57526370
use Tox

Whatsapp has end to end encryption

>>57526477
I hear that whatsapp got backdoor'd

>>57526439
lmao fuck outta here anon <3

>>57526466
that kinda sounds like something he had to say out loud, but secretly agree with inside. But at the same time, it seems spooky that the app uses his servers, so who's to say that his servers don't monitor LibreSignal, you know?

>>57526470
it looks really good. Can iOS users use this?

>>57526551
>Can iOS users use this
yes
the biggest difference between all the other mainstream messengers (fb, whasapp, signal, telegram, wire, hangouts, skype, etc) and tox is, that it is really open source
you don't need a phone number to use
and there are a bunch of clients out there
https://wiki.tox.chat/clients

>>57526466
Just to point out this is mostly a purist position. Data is still encrypted, but without using cloud messaging it will drain battery faster and be overall more network intensive.

Been using Signal for few months and it's kinda shit. Messages sometimes take hours to go trough and the call quality is shit and cuts all the time.

Signal is probably the best phone text messenger you can get right now, period. It isn't perfect, but it is still the best. I would recommend it above anything else.

The original TextSecure protocol was reviewed in https://eprint.iacr.org/2014/904 and recently the Signal protocol proper has been reviewed in https://eprint.iacr.org/2016/1013 - it passed with flying colours.

>>57526477
>>57526551
It is closed source, but WhatsApp was not backdoored when I last looked at it; it uses the same strong end-to-end encryption as Signal, and Trevor Perrin's excellent Noise protocol framework for the client-server communication.

Unfortunately WhatsApp recently chose to share your phone number with their parent company, Facebook, for contact/friend discovery - which, depending on your threat model, may have effects ranging from "disquieting" to "potentially life-threateningly terrifying". As a result, I couldn't recommend it anymore.

If however you already use Facebook, you might as well. I certainly commend them for bringing strong encryption to billions of people.

>>57526466
Unfortunately - and this is the reason why it is used there - GCM is the only supported method to wakelock while under Doze mode under recent versions of Android, so it is the only way your device could be woken to retrieve messages reliably.

Any other 'push' layers need special exceptions, and are very much second-class citizens.

I've heard it may be possible to use it with microG, although microG isn't particularly stable.

My other criticisms include Moxie's stance on federation (probably due to having worked with Cyanogen before, not sure if they might change now the protocol's fully documented?), the RedPhone voice communication part not being up to quite the same standard, and the desktop client being a Chrome plugin.

>>57526439
Honestly this. Why use anything else?

>>57526679
Battery drain and network usage is not dramatically higher when not using GCM.
Conversations XMPP client for Android does works very well without any kind of middleware like GCM.
If you ask me, Moxie insistence and intransigence in using GCM at any cost is a fucking big red flag.

>>57527832
This, Conversations barely uses any battery in servers that support the proper XEPs.

File: 1478125969059.png (489KB, 954x704px) Image search: [Google]

489KB, 954x704px

Use ChatSecure

Do you guys think people would be interested in something like theerema but completely open source (both client and server) for a small fee (let's say 1 USD a year)?

>>57527832
Conversations looks good, but isn't available for iOS users.

>>57527185
Not to sound snarky, but when was the last time you checked? I've read other /g/uys saying that Whatsapp got backdoor'd a while after the ph3cl5 backdoor'd apple.

Also, how does Signal compare to Conversations or Tox?

What's even the point if you're going to use it on closed source probably backdoor'd hardware anyway?

>>57529849
>What's even the point of locking your doors if you live in the ghetto anyway

>>57529939
So you agree?

>>57529849
Well, I use an android with the OS it came on. What recommendations would you suggest to disallow any backdoor?

Wire.com

Is 'Wickr Me' any good. Everything is claimed to be decrypted on device and not stored on their servers.

>>57529849
Yet we still have to see an exploit that make use of the gsm component of the SOC.
The reality is that phones are safe as long as the os they are running is not backdoored.
Lea can get some information like an approximate position of the device at a given time but that's not something you can solve even with a completely open source device.

>>57530467
Flash cyanogenmod and then remove the few proprietary components (there is a project hosted on github, google it).

Is Libresignal still active?

>safe

Fuck, man. Are you trading military secrets or some shit?

>>57534002

NSA please leave.

>be me
>looking for German on /b/ to translate/cheat on exam for me
>everyone wants to do it via Whatsapp
Why aren't people willing to migrate?
>tfw forced to use proprietary software when free as in freedom software is available

File: Screenshot_20161004123519.png (1MB, 1440x2560px) Image search: [Google]

1MB, 1440x2560px

>>57526370

>>57530528
Is it open source? If not, you have no guarantees that it actually works like they claim.

>>57534033
I hope you get caught and banned from ever graduating

>>57534065
Chill. I just cheat on German. I'll never need it besides Hitler memes.
Any Krauts here btw?
I need this to pass mid-term.
Hit me up at [email protected] for details.
I'll buy you 2$ game on Steam.

>>57526370
>needs google services
>goes through propitiatory server code

there are only mail with gpg and xmpp with gpg/otr safe for communication. xmpp is not suitable for mobile world.

>>57534082
Wtf anon? Sides -> Orbit

>>57527185
Any updates on the matrix thing? It would be nice if GAps wasn't so intrusive desu, phones don't function well without it but it's a little unsettling.

>>57526754
I have no problem with the messaging but the call quality is wanting and they do drop occasionally. All in all a little rough around the edges but perfectly serviceable.

These threads about secure messaging and such are popping up more frequently, perhaps this board needs a security/privacy/cypher general?

>>57535851
Last year one Anon helped me.
Now on /b/ no one sees the thread, it just 404s in a sea of trap threads.

>>57530488
This. Use wire.
Open source.
Works on android, ios, windows, mac, linux.
Allows 1on1 text, images, audio calls, video calls, file transfer, etc
Allows group chat text, images, audio calls, file transfer
Many other features as well
This is tox replacement

>>57536132
From my understanding only the client is open-source, however they do have plans to open-source the server-end as well.

The best part of Wire is they even have a feature that normies love, timed messages. I have no idea why they love 'em, but I can imagine a few use-cases for them.

Only other Alternative is Tox, unless you want to go with vector.im however I don't think that has an android app, and is severely lacking in features compared to wire.

>>57535913
Go on /int/ you dork.

Wire seems to be the most complete solution right now.

>>57536721
>>57536132
Wire looks very attractive and definitely has all the features but I don't know if it has been reviewed yet and they haven't sussed out a monetization strategy so that could be an fuarkup in the future. Also there was some strange beef between the devs and Moxie Marlinspike.

>>57536647
What's not to love about timed messages? They're great, didn't think I'd use them but in all honesty they are really useful.

>>57536647
>they do have plans to open-source the server-end as well.

source?
if they want to make money it's not a good idea.

>>57526370
What are you hiding?