Cybersecurity

7556 readers

219 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

The Guardian, in collaboration with the University of Cambridge Department of Computer Science, launches open-source Secure Messaging (www.theguardian.com)

submitted 1 day ago* (last edited 1 day ago) by Davriellelouna@lemmy.world to c/cybersecurity@sh.itjust.works

7 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] jesse@sh.itjust.works 9 points 23 hours ago (1 children)

This is their comment about how it compares to Signal:

End-to-end encrypted (E2EE) messaging apps like Signal and WhatsApp provide strong confidentiality of the message content. However, they do not hide communication patterns, such as who is communicating with whom and when. In addition, users cannot plausibly deny the existence of conversations if they are forced to unlock their smartphone. CoverDrop provides both strong metadata privacy, hiding who is communicating with whom and when, and plausible deniability, even where an adversary has physical access to the device and asks the user to unlock it.

I thought when Signal added sealed sender it was to make it hard to analyze traffic patterns on the server side. Signal would make it harder to deny communicating with someone if your phone is unlocked as even conversations with disappearing messages don't disappear themselves as I recall.

I am all for more secure communication, but in my mind, anything in this space needs to demonstrate how it's fundamentally better than signal. For the general use case that's typically pretty hard.

[–] JoeKrogan@lemmy.world 1 points 14 hours ago (1 children)

Also you could have the messages disappear after being read that way there is nothing on the phone except the contact of the person

[–] jesse@sh.itjust.works 2 points 9 hours ago

Absolutely, I read what this new app is trying to do as hide who you have talked to. If your phone does get searched, you ideally don't want people asking "hey, why do you have a disappearing chat with this Journalist who is writing stuff we don't like".

The flip side of that is that Signal has now gotten some traction with the guttural public, so there is (I would think) better plausible deniability having Signal installed than a relatively obscure/new secure messaging app that's for talking to journalists anonymously.