Author Topic: secure messaging service  (Read 1415 times)

0 Members and 1 Guest are viewing this topic.

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
secure messaging service
« on: September 05, 2015, 07:02:56 pm »
As everyone knows true anonymity is impossible, I am not talking about it here. What I am looking for is an app that provides non-widely compromised encryption. Not SSH Entreprise grade encryption but secure enough to not be subject to masw surveillance. Also the account or client shall require minimun information as in no access to Location, email, phone number etc... Just username and password if possible, if it's email only then with mailinator I'll be fine.

So if anyone have any idea about such service please share
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline gray-fox

  • Knight
  • **
  • Posts: 208
  • Cookies: 52
    • View Profile
Re: secure messaging service
« Reply #1 on: September 05, 2015, 07:19:17 pm »
You may be intrested to read this https://www.eff.org/secure-messaging-scorecard . Not maybe directly answering your question but at least it's strongly related.

edit: hmm. I thought whatsapp is suppose(/claimed) to be end-to-end encrypted these days, but that site seems to claim otherwise.
« Last Edit: September 05, 2015, 07:31:32 pm by gray-fox »

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Re: secure messaging service
« Reply #2 on: September 05, 2015, 09:32:29 pm »
You may be intrested to read this https://www.eff.org/secure-messaging-scorecard . Not maybe directly answering your question but at least it's strongly related.

edit: hmm. I thought whatsapp is suppose(/claimed) to be end-to-end encrypted these days, but that site seems to claim otherwise.


Thank you for the eff article, and when it comes to Whatsapp I know for a fact it's compromised, since all the drug seizures were done via the interception of whatsapp communication, also your whatsapp account is linked to your mobile number which directly links to my name (by law)
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline TheWormKill

  • EZ's Scripting Whore
  • Global Moderator
  • Knight
  • *
  • Posts: 257
  • Cookies: 66
  • The Grim Reaper of Worms
    • View Profile
Re: secure messaging service
« Reply #3 on: September 05, 2015, 09:39:40 pm »
Well, your question is very general and vague, so my answer will be, too.

Telegram provides encryption, but needs your phone number. However, some people dislike it for various reasons. It is still assumed to be more secure than WhatsApp, but that seems to be nothing to be proud of.
Also note that you can use a phone number associated with a SIM card that is prepaid and can be acquired
at a supermarket, gas station etc. without your name being registered in any way.
Combining this with some other measures of anonymization and a
short timespan during which you use a specific service via a specific device etc., it is theoretically possible
to achieve a certain amount of anonymization.

As you see, there is a lot of factors that affect the result.
Stuff I did: How to think like a superuser, Iridium

He should make that "Haskell"
Quote
<m0rph-is-gay> fuck you thewormkill you python coding mother fucker

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Re: secure messaging service
« Reply #4 on: September 06, 2015, 12:11:17 am »
Well, your question is very general and vague, so my answer will be, too.

Telegram provides encryption, but needs your phone number. However, some people dislike it for various reasons. It is still assumed to be more secure than WhatsApp, but that seems to be nothing to be proud of.
Also note that you can use a phone number associated with a SIM card that is prepaid and can be acquired
at a supermarket, gas station etc. without your name being registered in any way.
Combining this with some other measures of anonymization and a
short timespan during which you use a specific service via a specific device etc., it is theoretically possible
to achieve a certain amount of anonymization.

As you see, there is a lot of factors that affect the result.


Where I live for security reasons even prepaid lines are registered in your name, I do not think services like telegram are efficient but in the list gray-fox provided are some not very "famous" clients which are less likely to be compromised "hopefully"
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: secure messaging service
« Reply #5 on: September 06, 2015, 12:33:26 am »
As everyone knows true anonymity is impossible, I am not talking about it here. What I am looking for is an app that provides non-widely compromised encryption. Not SSH Entreprise grade encryption but secure enough to not be subject to masw surveillance. Also the account or client shall require minimun information as in no access to Location, email, phone number etc... Just username and password if possible, if it's email only then with mailinator I'll be fine.

So if anyone have any idea about such service please share
If you wanna go bunny style you can just preencrypt the mes with AES and send that.
Sharing a key must be done by secure means though , after that you can pretty much use anything.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline Xires

  • Noob Eater
  • Administrator
  • Knight
  • *
  • Posts: 379
  • Cookies: 149
    • View Profile
    • Feed The Trolls - Xires
Re: secure messaging service
« Reply #6 on: September 06, 2015, 08:25:14 am »
Can you be more specific about the message type?  Are you looking for an active connection between two clients or the ability to send a message to be read later(like via e-mail)?

PKI tends to work very well so I would strongly suggest looking into that.  If you're wanting to build the service yourself, there is plenty of documentation available.  If you're looking for an existing service, you may be able to locate one that uses PKI already.  You may also consider looking into I2P.
-Xires

Offline vanity

  • Serf
  • *
  • Posts: 39
  • Cookies: 6
  • Confidence is contagious, so is the lack of --VL
    • View Profile
Re: secure messaging service
« Reply #7 on: September 06, 2015, 08:53:32 am »
Have you looked into the wickr app? is supported by encryption key which you can view and manually type rather than send over sms. Is that the kind of messaging you are talking about? sms? also has a desktop chat client. It does not link to the phone number or email address just the user name you create

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Re: secure messaging service
« Reply #8 on: September 06, 2015, 11:04:57 am »

To be specific I was looking for way to communicate via mobile devices over a an instant messenger platform, which provides a good encryption of the message over Broadband and WiFi. The other party is a stoneman who owns an  iPhone and thus I can't create my own client even if I wanted to and assuming that I know how. But thank you all for your feedback, I really appreciated all the replies.


And when  it comes to the app itself I finally decided to go with Silent Text (https://www.silentcircle.com)


You can read more about it on their website, it can work without an email and the functionalities are neat. I did like the auto-destroy message where a message is destroyed from both devices after a certain time. I do not know how it's "destroyed", but also being available on iPhone and the fact that it's being still supported are great too.

I will leave this thread open for future discussion about secure messaging in general, which is a very relevant topic nowadays.
« Last Edit: September 06, 2015, 11:05:24 am by khofo »
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline kenjoe41

  • Symphorophiliac Programmer
  • Administrator
  • Baron
  • *
  • Posts: 990
  • Cookies: 224
    • View Profile
Re: secure messaging service
« Reply #9 on: September 06, 2015, 08:20:24 pm »
Aint you in luck, i was gonna strongly suggest silent circle's secure text app.
And when things get hard, invest in their BlackPhone.
If you can't explain it to a 6 year old, you don't understand it yourself.
http://upload.alpha.evilzone.org/index.php?page=img&img=GwkGGneGR7Pl222zVGmNTjerkhkYNGtBuiYXkpyNv4ScOAWQu0-Y8[<NgGw/hsq]>EvbQrOrousk[/img]

Offline nrael

  • Peasant
  • *
  • Posts: 66
  • Cookies: -7
    • View Profile
Re: secure messaging service
« Reply #10 on: September 07, 2015, 06:23:36 pm »

Offline iTpHo3NiX

  • EZ's Pirate Captain
  • Administrator
  • Titan
  • *
  • Posts: 2920
  • Cookies: 328
    • View Profile
    • EvilZone
Re: secure messaging service
« Reply #11 on: September 07, 2015, 07:05:56 pm »
I wish they didn't disband heml.is
[09:27] (+lenoch) iTpHo3NiX can even manipulate me to suck dick
[09:27] (+lenoch) oh no that's voluntary
[09:27] (+lenoch) sorry

Offline whatitdo

  • /dev/null
  • *
  • Posts: 15
  • Cookies: 4
  • "Caaaaarl!"
    • View Profile
Re: secure messaging service
« Reply #12 on: September 13, 2015, 01:29:37 am »
I suggest Wickr for long-term communications, or cryptocat if you want a temporary chatroom
"Here's to the crazy ones, the misfits, the rebels, the troublemakers, the round pegs in the square holes... the ones who see things differently -- they're not fond of rules... You can quote them, disagree with them, glorify or vilify them, but the only thing you can't do is ignore them because they change things... some may see them as the crazy ones, we see genius, because the ones who are crazy enough to think that they can change the world, are the ones who do."
-Steve Jobs

Offline queryFrequency

  • aka queerFrequency
  • Serf
  • *
  • Posts: 46
  • Cookies: -12
    • View Profile
Re: secure messaging service
« Reply #13 on: September 14, 2015, 02:05:34 am »

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Re: secure messaging service
« Reply #14 on: September 14, 2015, 02:14:13 am »
Wickr seems as a very reliable service, thank you for sharing. Testing now.
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security