home | list info | list archive | date index | thread index

Re: Secure messaging?

On 2024-12-09 19:30, Dianne Skoll via linux wrote:
> On Mon, 9 Dec 2024 09:10:57 -0500
> Alan McKay via linux <linux [ at ] linux-ottawa [ dot ] org> wrote:
> 
> > Viber is a popular one, is not tied to your phone number, and is not
> > as easy to lose your account.
> 
> Hmm...  https://en.wikipedia.org/wiki/Viber#Security_audit
> 
> "In May 2016, Viber published an overview of their encryption
> protocol, saying that it is a custom implementation..."
> 
> This gives me pause.

Yes, Roll-Your-Own-Encryption is naive and notorious for catastrophic
failures.

Bruce Schneier has lots of stories of these in his Schneier on Security
newsletter.

> If there is some sort of communication that you want to be protected
> from interception by a nation-state, then this is my recommendation:
> 
>      Do not communicate it electronically.
> 
> Whisper it into the ear of the intended recipient in a crowded and noisy
> location.  And then hope that the nation-state doesn't come after you
> or the recipient with batons...
> 
> For less-sensitive information, I'd use GnuPG-encrypted email.
> 
> Regards,
> Dianne.

	slainte mhath, RGB

-- 
Richard Guy Briggs               --  ~\    -- ~\             <hpv.tricolour.ca>
<www.TriColour.ca>                 --  \___   o \@       @       Ride yer bike!
Ottawa, ON, CANADA                  --  Lo_>__M__\\/\%__\\/\%
Vote! -- <greenparty.ca>_____GTVS6#790__(*)__(*)________(*)(*)_________________

To unsubscribe send a blank message to linux+unsubscribe [ at ] linux-ottawa [ dot ] org
To get help send a blank message to linux+help [ at ] linux-ottawa [ dot ] org
To visit the archives: https://lists.linux-ottawa.org

message navigation