The Guardian, in collaboration with the University of Cambridge Department of Computer Science, launches open-source Secure Messaging (www.theguardian.com)
from Davriellelouna@lemmy.world to cybersecurity@sh.itjust.works on 15 Jun 22:29
https://lemmy.world/post/31443277

#cybersecurity

threaded - newest

supersquirrel@sopuli.xyz on 15 Jun 22:50 next collapse

Built by our product and engineering team, in partnership with the University of Cambridge’s department of computer science ​and technology​, Secure Messaging is unlike traditional information-sharing platforms​. The technology behind Secure Messaging conceals the fact that messaging is taking place at all by making the communication indistinguishable from other data sent to and from the app by our millions of regular users. By using the Guardian app, other users are effectively providing “cover” and helping us to protect sources.

Secure Messaging is not just a tool for the Guardian. As part of our commitment to protecting the media and the public interest globally, the Guardian has published the source code for the technology that enables this system. This means that other organisations will be able to use this technology freely to implement secure messaging tools within their own apps.

FundMECFSResearch@lemmy.blahaj.zone on 16 Jun 11:23 collapse

Pretty cool. Shame you have to use their Add and Tracker riddled app for it though.

otter@lemmy.ca on 15 Jun 23:12 next collapse

Built by our product and engineering team, in partnership with the University of Cambridge’s department of computer science ​and technology​, Secure Messaging is unlike traditional information-sharing platforms​. The technology behind Secure Messaging conceals the fact that messaging is taking place at all by making the communication indistinguishable from other data sent to and from the app by our millions of regular users. By using the Guardian app, other users are effectively providing “cover” and helping us to protect sources.

That is interesting. There is also secure drop, which is used by a lot of news organisations including The Guardian

securedrop.org

jesse@sh.itjust.works on 16 Jun 00:57 next collapse

This is their comment about how it compares to Signal:

End-to-end encrypted (E2EE) messaging apps like Signal and WhatsApp provide strong confidentiality of the message content. However, they do not hide communication patterns, such as who is communicating with whom and when. In addition, users cannot plausibly deny the existence of conversations if they are forced to unlock their smartphone. CoverDrop provides both strong metadata privacy, hiding who is communicating with whom and when, and plausible deniability, even where an adversary has physical access to the device and asks the user to unlock it.

I thought when Signal added sealed sender it was to make it hard to analyze traffic patterns on the server side. Signal would make it harder to deny communicating with someone if your phone is unlocked as even conversations with disappearing messages don’t disappear themselves as I recall.

I am all for more secure communication, but in my mind, anything in this space needs to demonstrate how it’s fundamentally better than signal. For the general use case that’s typically pretty hard.

JoeKrogan@lemmy.world on 16 Jun 10:37 collapse

Also you could have the messages disappear after being read that way there is nothing on the phone except the contact of the person

jesse@sh.itjust.works on 16 Jun 15:25 collapse

Absolutely, I read what this new app is trying to do as hide who you have talked to. If your phone does get searched, you ideally don’t want people asking “hey, why do you have a disappearing chat with this Journalist who is writing stuff we don’t like”.

The flip side of that is that Signal has now gotten some traction with the guttural public, so there is (I would think) better plausible deniability having Signal installed than a relatively obscure/new secure messaging app that’s for talking to journalists anonymously.

onionsinmypores@sh.itjust.works on 16 Jun 15:40 collapse

This is awesome. I went ahead and did a “Woahhhhhhhhhhh” after seeing the title