EvilZone

Community => General discussion => : khofo September 05, 2015, 07:02:56 PM

: secure messaging service
: khofo September 05, 2015, 07:02:56 PM
As everyone knows true anonymity is impossible, I am not talking about it here. What I am looking for is an app that provides non-widely compromised encryption. Not SSH Entreprise grade encryption but secure enough to not be subject to masw surveillance. Also the account or client shall require minimun information as in no access to Location, email, phone number etc... Just username and password if possible, if it's email only then with mailinator I'll be fine.

So if anyone have any idea about such service please share
: Re: secure messaging service
: gray-fox September 05, 2015, 07:19:17 PM
You may be intrested to read this https://www.eff.org/secure-messaging-scorecard . Not maybe directly answering your question but at least it's strongly related.

edit: hmm. I thought whatsapp is suppose(/claimed) to be end-to-end encrypted these days, but that site seems to claim otherwise.
: Re: secure messaging service
: khofo September 05, 2015, 09:32:29 PM
You may be intrested to read this https://www.eff.org/secure-messaging-scorecard . Not maybe directly answering your question but at least it's strongly related.

edit: hmm. I thought whatsapp is suppose(/claimed) to be end-to-end encrypted these days, but that site seems to claim otherwise.


Thank you for the eff article, and when it comes to Whatsapp I know for a fact it's compromised, since all the drug seizures were done via the interception of whatsapp communication, also your whatsapp account is linked to your mobile number which directly links to my name (by law)
: Re: secure messaging service
: TheWormKill September 05, 2015, 09:39:40 PM
Well, your question is very general and vague, so my answer will be, too.

Telegram provides encryption, but needs your phone number. However, some people dislike it for various reasons. It is still assumed to be more secure than WhatsApp, but that seems to be nothing to be proud of.
Also note that you can use a phone number associated with a SIM card that is prepaid and can be acquired
at a supermarket, gas station etc. without your name being registered in any way.
Combining this with some other measures of anonymization and a
short timespan during which you use a specific service via a specific device etc., it is theoretically possible
to achieve a certain amount of anonymization.

As you see, there is a lot of factors that affect the result.
: Re: secure messaging service
: khofo September 06, 2015, 12:11:17 AM
Well, your question is very general and vague, so my answer will be, too.

Telegram provides encryption, but needs your phone number. However, some people dislike it for various reasons. It is still assumed to be more secure than WhatsApp, but that seems to be nothing to be proud of.
Also note that you can use a phone number associated with a SIM card that is prepaid and can be acquired
at a supermarket, gas station etc. without your name being registered in any way.
Combining this with some other measures of anonymization and a
short timespan during which you use a specific service via a specific device etc., it is theoretically possible
to achieve a certain amount of anonymization.

As you see, there is a lot of factors that affect the result.


Where I live for security reasons even prepaid lines are registered in your name, I do not think services like telegram are efficient but in the list gray-fox provided are some not very "famous" clients which are less likely to be compromised "hopefully"
: Re: secure messaging service
: proxx September 06, 2015, 12:33:26 AM
As everyone knows true anonymity is impossible, I am not talking about it here. What I am looking for is an app that provides non-widely compromised encryption. Not SSH Entreprise grade encryption but secure enough to not be subject to masw surveillance. Also the account or client shall require minimun information as in no access to Location, email, phone number etc... Just username and password if possible, if it's email only then with mailinator I'll be fine.

So if anyone have any idea about such service please share
If you wanna go bunny style you can just preencrypt the mes with AES and send that.
Sharing a key must be done by secure means though , after that you can pretty much use anything.
: Re: secure messaging service
: Xires September 06, 2015, 08:25:14 AM
Can you be more specific about the message type?  Are you looking for an active connection between two clients or the ability to send a message to be read later(like via e-mail)?

PKI tends to work very well so I would strongly suggest looking into that.  If you're wanting to build the service yourself, there is plenty of documentation available.  If you're looking for an existing service, you may be able to locate one that uses PKI already.  You may also consider looking into I2P.
: Re: secure messaging service
: vanity September 06, 2015, 08:53:32 AM
Have you looked into the wickr app? is supported by encryption key which you can view and manually type rather than send over sms. Is that the kind of messaging you are talking about? sms? also has a desktop chat client. It does not link to the phone number or email address just the user name you create
: Re: secure messaging service
: khofo September 06, 2015, 11:04:57 AM

To be specific I was looking for way to communicate via mobile devices over a an instant messenger platform, which provides a good encryption of the message over Broadband and WiFi. The other party is a stoneman who owns an  iPhone and thus I can't create my own client even if I wanted to and assuming that I know how. But thank you all for your feedback, I really appreciated all the replies.


And when  it comes to the app itself I finally decided to go with Silent Text (https://www.silentcircle.com (https://www.silentcircle.com))


You can read more about it on their website, it can work without an email and the functionalities are neat. I did like the auto-destroy message where a message is destroyed from both devices after a certain time. I do not know how it's "destroyed", but also being available on iPhone and the fact that it's being still supported are great too.

I will leave this thread open for future discussion about secure messaging in general, which is a very relevant topic nowadays.
: Re: secure messaging service
: kenjoe41 September 06, 2015, 08:20:24 PM
Aint you in luck, i was gonna strongly suggest silent circle's secure text app.
And when things get hard, invest in their BlackPhone.
: Re: secure messaging service
: nrael September 07, 2015, 06:23:36 PM
https://crypto.cat/

or

https://hack.chat
: Re: secure messaging service
: iTpHo3NiX September 07, 2015, 07:05:56 PM
I wish they didn't disband heml.is
: Re: secure messaging service
: whatitdo September 13, 2015, 01:29:37 AM
I suggest Wickr for long-term communications, or cryptocat if you want a temporary chatroom
: Re: secure messaging service
: queryFrequency September 14, 2015, 02:05:34 AM
Try https://www.wickr.com/ (https://www.wickr.com/).
: Re: secure messaging service
: khofo September 14, 2015, 02:14:13 AM
Wickr seems as a very reliable service, thank you for sharing. Testing now.
: Re: secure messaging service
: Katheudo September 17, 2015, 01:04:05 AM
I have recently found this online service https://privatoria.net/ I am not 100% sure how decent it is but I am sure you can take a look. It all seems ok so far and a good service.
: Re: secure messaging service
: iTpHo3NiX September 18, 2015, 09:15:53 AM
I have recently found this online service https://privatoria.net/ I am not 100% sure how decent it is but I am sure you can take a look. It all seems ok so far and a good service.

I'll vouch for privatoria, I've only used it for a couple of hours, but a fast alternate DNS (use as main, google as secondary) vpn, encrypted email, bitcoin payments, $22/yr this is my new goto service as far as vpns and proxies. Have a new email Addy now for shit. Great service so far, no problems or hiccups, easy mobile app, etc.
: Re: secure messaging service
: Katheudo September 18, 2015, 10:51:31 AM
Well then I might have to purchase their 1 year plan. I have also used the trial and I am impressed. Again with me it seems there has been no problems and it is a great service. Also because we have to pay we some what know we are not the product, if you get me.
: Re: secure messaging service
: khofo September 18, 2015, 07:01:33 PM
I have recently found this online service https://privatoria.net/ I am not 100% sure how decent it is but I am sure you can take a look. It all seems ok so far and a good service.

It seems really neat, as per iTpHo3NiX's reply it seems reliable too, thank you for sharing and I'll definitely take it into consideration :)
: Re: secure messaging service
: Katheudo September 18, 2015, 08:06:00 PM
It seems really neat, as per iTpHo3NiX's reply it seems reliable too, thank you for sharing and I'll definitely take it into consideration :)

No problem, I think I will sign up to :D The trial was good!