Hacker News Reader

Comment by zeveb | Hacker News Reader

Only because they don't store it. They are able to choose to store it at any point; we can only rely on their honesty (and lack of compulsion). It's better to have a protocol in which there isn't any significant metadata to choose to store.

I don't distrust them today, but I have no way of knowing what their future behaviour will be. I'd prefer not to have to trust.

View on HN

The client is open source[1], we can at least define a limit to what information can be stored that is not end-to-end encrypted.

https://github.com/WhisperSystems/Signal-Android

How many people build from source? Moxie worked to stop distribution of binaries outside the Play Store, which is not unreasonable in itself but leaves a nice central point to target individuals.

Who owns Open Whisper Systems? I know Twitter bought WhisperSys, and with it Textsecure and Redphone though unsure who currently owns Open WhisperSys and it's products Signal (I assume Twitter does). Twitter is also rumoured for sale with Microsoft looking at aquiring it, so the future of Signal not keeping this metadata depends on who aquires it.

Open Whisper Systems is a nonprofit founded by Moxie Marlinspike in 2013, and it's a different entity than the "Whisper Systems" Twitter bought earlier.

Yeah, I wish he went with another name, too. Not only is Open Whisper Systems making it more confusing, but it's also quite a mouthful.

Is this something OWS could be subpoena'd for? Or something that the government would just subpoena Google for?

(I mean, given a phone number, can't you identify someone's Google Play account anyway? That sounds more useful.)

> Is this something OWS could be subpoena'd for?

Not by subpoena alone, but in theory a court order could order them to modify their software (server or client) to collect data. They could fight that court order, and in particular it seems like they'd have a good case on the grounds that such an order would destroy their entire business, but legally a court could at least attempt to issue such an order.

I'm more concerned about this NSA/FBI partnership that secretly forces cooperation somehow. It might apply up to and including forcing a backdoor into the binary. Here's the program for US cooperation:

http://www.globalresearch.ca/leaked-documents-expose-secret-...

The interesting part is in this table from the TS/ECI leaks from Core Secrets:

https://theintercept.com/document/2014/10/10/eci-whipgenie-c...

Notice how the lower levels of secrecy talk about how the companies cooperate or are partners. Then, you hit TS/COMINT and TS/ECI to find additional detail:

"the fact that FBI provides assistance with compelled and cooperative partnerships associated with WHIPGENIE"

"details of FBI assistance with compelled and cooperative partnerships with WHIPGENIE"

So, it's a backdooring program with major U.S. companies that the FBI "compels" assistance with for those that don't willingly cooperate. I have no idea what that entails but it works. It might work better on smaller firm with less resources but also maybe less as I think damaging income stream matters to greedy CEO's at public firms more. So, who knows.

Personally, I think they're pulling a variation of Escobars silver or lead policy. You take generous bribes to do what they want or you take generous donations of lead. In this case, legal fines or imprisonment rather than actual lead.

Ah, I understand now. Thanks.

And thank you for replying so nicely — it's a sign that HN hasn't yet become /. or reddit. Best!

Reply on news.ycombinator.com