Hacker News Reader

even if an Android application would communicate with others 100% securely, Google has wireless administrator privileges and can be served secret letters that can order Google to do anything, so technically they could log the data before it's encrypted.

View on HN

Will an I/O audit of the network interface will detect this?

No. How do you propose that it would?

I don't really know much about what kind of network chatter Android generates generally, but I imagine that, even if its encrypted, you can detect that there's suddenly network traffic to Google?

And then, depending on how silly the eavesdropping is, repeating the same message might cause the same encrypted payload to be transmitted?

traffic to Google is probably very common... and to be sure that you get the whole picture, you would probably need to intercept wireless signals going to the cellphone company which are also encrypted

Only if you have google services installed.

Without which TextSecure does not work.

But what about the fork https://github.com/SMSSecure/SMSSecure which can be installed on via f-droid google-less phone?

It has no push messages which means bad experience for non-SMS messages.

The fork only handles SMS/MMS. There are no IM features in it.

Reply on news.ycombinator.com