Get the latest tech news
Reviewing the cryptography used by Signal
Last year, I urged furries to stop using Telegram because it doesn’t actually provide them with any of the privacy guarantees they think it gives them. Instead of improving Telegram’s c…
Furthermore, performing an audit of a product or service without a clear threat model can lead to a lot of disagreement about the relevance or severity of any findings. What a more recognizable brand gives you, however, is a reasonable amount of quality control: They’re generally better resourced to ensure that the appropriate experts are assigned to each project, so you’re less likely to end up with a useless rubber-stamp Audit Report than you might from a one-person shop in over their head. Verifying the security claims made by an encrypted messaging app does not require a Ph.D in mathematics or an encyclopedic knowledge of software vulnerabilities.
Or read this on Hacker News