It wasn't an exhaustive list, merely two of the better options. What we really need is to get everyone to replace #WhatsApp with one of the aforementioned options. #privacy #communications #security
-
-
Replying to @823_4_328 @whispersystems and
Telegram is under quite heavy discussion because of non standard crypto (MTPROTO 2.0) and non default crypto (only in Secret messages) therefore I recommend the other two.
1 reply 0 retweets 1 like -
Replying to @W00fer @whispersystems and
is
#Threema#OpenSource? Either way, I'm happy to concede#Telegram due to the use of unproven#MTPROTO protocol,#Signal by@whispersystems is still secure https://www.eff.org/node/82654#privacy and is preferable to#WhatsApp1 reply 0 retweets 2 likes -
Replying to @823_4_328 @whispersystems and
Well if it was fully open source it could be copied. And I understand that. They chose a paid model since vulnerabilities need to be fixed by devs who need food. Threema updates more frequent than other crypto messengers. Signal has a huge backlog of issues.
2 replies 0 retweets 1 like -
Replying to @W00fer @whispersystems and
unless it's
#OpenSource you've no idea what the software is doing and if you're interested in#security and#privacy, knowing what the software is doing should be at the top of the list of priorities. what huge backlog of issues does#signal have?1 reply 0 retweets 2 likes -
Replying to @823_4_328 @whispersystems and
See Signal's Github. Long lasting sync errors between clients because of a pesky BAD MAC error. Some tickets are open for over a year. Threema is audited so I trust their code. Plus: it can work without Google Cloud Messages, which Signal cannot!
1 reply 0 retweets 0 likes -
Replying to @W00fer @whispersystems and
Who is
@ThreemaApp audited by? You know and trust them?#Signal doesn’t require google cloud messages (I think you're referring to services framework?). You can use#MicroG https://microg.org/2 replies 0 retweets 0 likes -
Replying to @823_4_328 @whispersystems and
And YES, Signal uses Google (and their cloud messaging platform) not MicroG. Threema does not as it has option for manual polling.https://www.computerworld.com/article/3153059/security/encrypted-messaging-app-signal-uses-google-to-bypass-censorship.html …
3 replies 0 retweets 0 likes -
Replying to @W00fer
GCM is used solely for the default Android push notifications, and those are simple wakeup events that do not include any encrypted message content or additional metadata whatsoever. Non-Play users receive push events via a WebSocket and they can still send and receive messages.
2 replies 0 retweets 4 likes -
Replying to @signalapp @whispersystems
Well a wakeup event is identifiable metadata. Thanks for the explanation. I might switch over to the external APK
1 reply 0 retweets 1 like
The wakeup event doesn't reveal any information about who you are communicating with. It simply tells the app that there is a new message.
-
-
Replying to @signalapp @whispersystems
Yes but 100 wakeup events a day is identifiable data how much a user uses the app!
2 replies 0 retweets 0 likes -
Replying to @W00fer
The non-Play version of Signal that is available on our website does not use GCM or any other Google services when Google Play is not installed.
0 replies 0 retweets 3 likes
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.