The ISIS encrypted messaging app the media reported on recently does not exist (opens in new tab)

(dailydot.com)

11 pointsflurpitude10y ago3 comments

3 comments

3 comments · 1 top-level

bobby_9x10y ago· 2 in thread

It's pretty trivial to create an encrypted app: put together a simple custom android app that uses open source openssl libs for messaging directly between phones/clients.

There will be no way to stop this.

bisby10y ago

Also, trying to defeat encryption by forcing backdoors into things won't prevent people from using a different version.

Compromising OpenSSL won't break LibreSSL, and nothing stops you from having a "pre-government intervention" version of either of them.

There is definitely no way to stop this, and government intervention only harms honest people.

ibejoeb10y ago

>nothing stops you from having a "pre-government intervention" version

Don't neglect to consider surreptitious intervention. You're not going to see a `dhs/libressl` fork on github. We tried that with the NSA->NIST flow, and it was outed. New flaws will be injected by some cryptographer being run by clandestine services.

j / k navigate · click thread line to collapse