Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Just adding another open-source (Android only, for now) competitor from WhisperSystems (Moxie Marlinspike), including a secure-voice app:

https://whispersystems.org/

https://github.com/WhisperSystems

Moxie is supposedly working on an iOS version. The Android version is fairly seamless and can still contact users not using the app -- wire insecure. The local storage is encrypted, regardless of your contact -- again, you run the risk of wiretapping, if the other end does not share the use of the app.



Ever since the cryptocat fiasco I'm quite wary of trusting these kind of apps, that seem to be appearing like mushrooms lately. Can anyone with any crypto know-how comment on the security of WhisperSystems?


I'll let the crypto guys comment, but my understanding is that Moxie is no pushover in that arena.

The following are the protocols used by WhisperSystems:

https://github.com/WhisperSystems/TextSecure/wiki/Protocol

https://github.com/WhisperSystems/RedPhone/wiki/Encryption-P...


Moxie the founder of whisper systems is for real, and whisper systems is owned by twitter now and I'm not sure how much they are supporting it.

Silent Circle is Phil Zimmerman who is also for real (PGP real).

Trust apps that are developed by heavies with a history of first class crypto work. Be wary when a group of people with limited crypto experience launches a secure communications app especially if the app runs in the browser.


Moxie Marlinspike is the real deal.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: