Comment on WhatsApp provides no cryptographic management for group messages

ouch@lemmy.world ⁨6⁩ ⁨days⁩ ago

• sykaster@feddit.nl ⁨6⁩ ⁨days⁩ ago

  Just be sure to add only the people you want to be there. I’ve heard someone people add others and it’s a bit messy

  source

  • tias@discuss.tchncs.de ⁨6⁩ ⁨days⁩ ago

    How bad can it be, it’s not like we’re sharing state secrets

    source

    • AbidanYre@lemmy.world ⁨6⁩ ⁨days⁩ ago

      We’re clean on OpSec

      source
• ParetoOptimalDev@lemmy.today ⁨6⁩ ⁨days⁩ ago

  Or simplex.chat where there are no identifiers like phone numbers or any other identifier.

  Security review was done by trail of bits.

  source
• unexposedhazard@discuss.tchncs.de ⁨6⁩ ⁨days⁩ ago

  Or P2P stuff like Briar :)

  source
• Bahnd@lemmy.world ⁨6⁩ ⁨days⁩ ago

  Or Matrix (warning some assembly required)

  source

  • new_guy@lemmy.world ⁨6⁩ ⁨days⁩ ago

    WhatsApp isn’t the only messenger lacking cryptographic assurances for new group members. In 2022, a team that included some of the same researchers that analyzed WhatsApp found that Matrix—an open source and proprietary platform for chat and collaboration clients and servers—also provided no cryptographic means for ensuring only authorized members join a group. The Telegram messenger, meanwhile, offers no end-to-end encryption for group messages, making the app among the weakest for ensuring the confidentiality of group messages.

    source

    • Bahnd@lemmy.world ⁨6⁩ ⁨days⁩ ago

      That study was 3 years ago, features to create private (invite only) group chats are supported now.

      source
    • sem@lemmy.blahaj.zone ⁨5⁩ ⁨days⁩ ago

      How can matrix be insecure when it keeps locking me out of my own messages?

      source
    • coconut@programming.dev ⁨6⁩ ⁨days⁩ ago

      an open source and proprietary platform

      Are parts of matrix closed source?

      source
  • Vanilla_PuddinFudge@infosec.pub ⁨6⁩ ⁨days⁩ ago

    I actually found xmpp to be a breeze compared to most Matrix solutions.

    Synapse is bloated, dendrite sucks and conduit is in perpetual beta and the uwu forks die too fast.

    XMPP:

    1. Install Snikket
    2. Reverse proxy
    3. Done

    source
• coconut@programming.dev ⁨6⁩ ⁨days⁩ ago

  Just use signal is not a valid statement in a world where vast majority of people aren’t using (and won’t use) it. I have been trying to get people to install it and have a total of 6 over several years. They only use it to communicate with me.

  source