HNHacker News
TopNewBestAskShowJobs

RDaneelOlivaw

13 karma · joined November 7, 2014

submissionscomments
RDaneelOlivaw··on How secure is TextSecure?
I think you're probably right there. Here are moxie's comments on it: http://thoughtcrime.org/blog/telegram-crypto-challenge/

And here's a thorough trashing of their crypto: http://www.cryptofails.com/post/70546720222/telegrams-crypta...

I'm not a cryptographer either, so I can't comment on how accurate that last link is, but I tend to trust moxie, and if he thinks it stinks, well.....

RDaneelOlivaw··on How secure is TextSecure?
Hmmm, I have not experienced these disappearing messages, although, maybe I have and I don't know it. I wouldn't know if one of my messages didn't go through to the other party would I? I will have to check with my friends and compare their message history to mine next time I see one of them.

Also, yeah I am desperately waiting on a secure messaging app that is has good crypto, ios/android, AND desktop support. So far there isn't one that fills all those, so for now I'll settle for good crypto rather than platform support. From what I understand, multiple logins from devices using the same identity is really hard for good crypto? I'm not sure but that'd explain why all the top secure messaging apps don't do it. yet.

Being open source and audited also matters a lot to me.

RDaneelOlivaw··on How secure is TextSecure?
I've not found textsecure to be buggy at all, can you explain your experience a bit more? My friends and I switched to it from surespot and love it. Its also a killer feature that it handles standard SMS as well. A single app for all messaging.

Also, wasn't telegram demonstrated to have awful crypto? Like basically pointless to use from an encryption standpoint?

I'm keeping an eye on the forthcoming Hemlis messenger which should have good crypto and launch on iOS/android and from the demo videos it has an awesome ui. However they're taking forever to launch the thing so who knows when it'll be out. Also it will need to be open sourced and audited before I trust it.