@tobiasboelter Hat tip.
.@WhatsApp is not secure. Don't use it.
https://tobi.rocks/2016/04/whats-app-retransmission-vulnerability/ …pic.twitter.com/Bj4MuNHObw
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
-
-
Huh? WhatsApp uses Noise for transport security, and Signal Protocol for e2e.
-
Ok, s/TLS/Noise. Still not really e2e if it ignores key change.
-
It is e2e by definition. It doesn't "ignore" key changes, it notifies you of them and allows you to verify security codes.
-
It automatically sends your message to MITM, I'd call that ignoring.
-
From our research, most privacy conscious users want advisory rather than blocking notifications. Signal is moving the same way.
-
Wonder how folks like
@thegrugq would feel about such a change? - 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.