• @hera@feddit.uk
    link
    fedilink
    English
    1416 days ago

    Love seeing open source projects from companies that aren’t specifically tech firms

  • MynameisAllen
    link
    fedilink
    English
    1016 days ago

    I saw the headline and was ready to rage about why they should just use signal instead. Then I read the article and honestly this is a fucking genius use of tech

    • Ulrich
      link
      fedilink
      English
      3
      edit-2
      16 days ago

      I read it and don’t understand. Why is this better than Signal? Or the 500 other secure file/messaging protocols?

      Jabber seemed to work perfectly for Snowden…

      • @rosco385@lemmy.wtf
        link
        fedilink
        English
        1616 days ago

        Because analysing network traffic wouldn’t allow an adversary to see what you’re sending with Signal, but they could still tell you’re sendig a secure message.

        What the Guardian is doing is hiding that secure chat traffic inside the Guardian app, so packet sniffing would only show you’re accessing news.

        • Ulrich
          link
          fedilink
          English
          116 days ago

          analysing network traffic wouldn’t allow an adversary to see what you’re sending with Signal

          How are they analyzing network traffic with Signal? It’s encrypted. And why does it matter if they know you’re sending a message? Literally everyone using Signal is sending a message.

          • @papertowels@mander.xyz
            link
            fedilink
            English
            2
            edit-2
            15 days ago

            How are they analyzing network traffic with Signal? It’s encrypted

            Not my specialty, but signals end to end encryption is akin to sealing a letter. Nobody but the sender and the recipient can open that letter.

            But you still gotta send it through the mail. That’s the network traffic analysis that can be used.

            Here’s an example of why that could be bad.

          • Natanael
            link
            fedilink
            English
            216 days ago

            Timing of messages. They can’t tell what you send, but can tell when

            • Ulrich
              link
              fedilink
              English
              -13
              edit-2
              16 days ago

              No they can’t.

              E: if someone wants to provide evidence to the contrary instead of just downvoting and moving on, please, go ahead.

      • MynameisAllen
        link
        fedilink
        English
        216 days ago

        For one, ease of access. Say you’re trying to break a story, who are you going to message with signal? Because you’re going to need to get that contact info somehow right?

        Snowden is permanently stranded in Russia. That’s not exactly a great example of an anonymous source.

        • Ulrich
          link
          fedilink
          English
          016 days ago

          Say you’re trying to break a story, who are you going to message with signal?

          …The Guardian?

          Because you’re going to need to get that contact info somehow right?

          Use your browser? These are strange questions.

          Snowden is permanently stranded in Russia. That’s not exactly a great example of an anonymous source.

          Did you notice that I used the past tense?

      • @MCasq_qsaCJ_234@lemmy.zip
        link
        fedilink
        English
        116 days ago

        Messaging protocols already resemble the frameworks that come out from time to time. And their effectiveness is due to the fact that they require a certain quota of users.

        It’s just a secure messaging app with a direct line to Guardian journalists. How to use 911 or special numbers when you’re not feeling well.

  • @fubarx@lemmy.world
    link
    fedilink
    English
    916 days ago

    Similar to other apps, CoverDrop only provides limited protection on smartphones that are fully compromised by malware, e.g., Pegasus, which can record the screen content and user actions.

  • @SocialMediaRefugee@lemmy.world
    link
    fedilink
    English
    216 days ago

    The tech behind the tool conceals the fact that messaging is taking place at all. It makes the communication indistinguishable from data sent to and from the app by our millions of regular users.

    Reminds me of how the Germans in WW1 knew they couldn’t trust their diplomatic codes anymore so they just sent the important messages in the normal, innocuous telegraph system and diplomatic pouches. They knew that foreign intelligence would be focused on the bogus secure messages.