Hacker News new | ask | show | jobs
by ColanR 2312 days ago
I don't think either are good options. I was reading on here recently about the $2.1M that the US gov paid (indirectly) to Signal, with the implication of the associated compromise of integrity. And PGP is so labyrinthine that most of the mail tools implementing it had been compromised for more than a decade. [1]

Whatsapp? It's owned by Facebook, as we know, and I wonder if we can believe that we put on there is actually safe. I think that would be naive.

[1] https://arstechnica.com/information-technology/2018/06/decad...

2 comments

Hi, I'm having trouble finding any information on the 2.1M that you said the US gov paid Signal Foundation. Do you have a source? I'd love to know if this is true.
The OP is probably referring to financing that Open Whisper Systems (precursor to the Signal foundation) received from Open Technology Fund (https://www.opentech.fund/results/supported-projects/open-wh...) which according to the Wikipedia has ties to the US government (https://en.wikipedia.org/wiki/Open_Technology_Fund). I guess the idea was to provide encrypted means of communication to dissidents in US-hostile countries.

Though I think it is a moot point. Signal foundation is a US organization and its officers are US citizens. I don't think the US government will have any trouble coercing them to do its bidding regardless of whether it financed them or not.

I see. Since the PATRIOT act was put into place the US government can pretty much justify anything at this point so i tend to share the same viewpoint. Thanks for the sources man.
>None of the vulnerable programs enables verbose by default,...

So the compromise is mostly theoretical...