Search Mailing List Archives


Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[liberationtech] Wicker: Déjà vu all over again

Joshua Kopstein joshk at riseup.net
Tue Jun 10 07:19:57 PDT 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
 
On 6/9/2014 8:42 PM, Yosem Companys wrote:
> Wickr is back in the news in spectacular form:
>
>
http://www.inc.com/magazine/201407/ceo-of-wickr-leads-social-media-resistance-movement.html
>
> ...despite known security problems we've discussed on the list before:
>
>
https://mailman.stanford.edu/pipermail/liberationtech/2012-June/004239.html
>
> Seems as though we need better tactics to share with journalists our
> impressions about security.
>
> YC

Looking at the list of issues Nathan mentioned, I'm seeing that at least
some of them like PFS have been addressed since that posting (with the
glaring exception of Open Source, unfortunately). They've also received
an audit from Veracode since then IIRC.

Obviously I can't speak expertly on the crypto, but I think it should be
a positive thing that there's a push for ephemeral social
media/messaging with some semblance of security in mind (aka - not
Snapchat).

I've spoken with one of the creators several times and they've always
struck me as forthcoming and fairly determined to hammer out these
issues....eventually. A lot of people I talk to in the infosec community
also seem pretty enthusiastic about it. But yeah, would definitely love
to have some kind of catalog of concerns about this and other commercial
solutions - I get pitched on the latest "magic" email encryption
snakeoil regularly.
- -- 
Joshua Kopstein
? Cyberculture Journalist
? PGP Key: http://is.gd/lHEXgs
https://joshk.contently.com
-----BEGIN PGP SIGNATURE-----
 
iQEcBAEBCgAGBQJTlxQEAAoJEP1hZpSrdQtYFNoH/26KB0xR7XoqcWVfujlGbv7C
rR5mj6qA61c7zD+thtIRQMJ1FAK7DUa2tuYaa127YIlEPfpu9B25MWitcCMe2zmm
saUrVyZ/Y/8j/zfX1XTjXmArdv4Fg1EMuEvvTXx9aXPx4yRbl2cNY3bpW9k0z4Fo
PNlxSZ9cKR1cSVhtb9YrGoRNz8RSdYmYwEPhYFvMxtcRLY42GbfiTQVUC1e7LL/W
ZUWoeJm6aXPaih2alW5l4MgauIF1pGE9e7nVUVv7MO6tpOjzN5iYnym/Qv2u6FQa
+ilbTOAwL+Vy3LrsymKsL+UoMNoQ3qT7THfBtbnYC5UPBJYAkJcI+5BipjuV2zI=
=f+qA
-----END PGP SIGNATURE-----




More information about the liberationtech mailing list