The Guardian, in collaboration with the University of Cambridge, launches open-source Secure Messaging technology

Comments

• octoshrimpy@sh.itjust.works ⁨3⁩ ⁨weeks⁩ ago

  standards.xkcd

  source

  • Mac@mander.xyz ⁨3⁩ ⁨weeks⁩ ago

    TL;DR

    -There are 15 competing standards-
    “I’m tired of this shit! I’m going to make a single, universal standard!”
    -There are 16 competing standards-

    source

    • Jolteon@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

      I’m not sure if you can call something TL;DR if it’s literally the full text of the comic.

      source

      • -> View More Comments
  • Deebster@infosec.pub ⁨3⁩ ⁨weeks⁩ ago

    That was my first thought, but it’s actually a library for newsreader-type apps that lets a communication happen without exposing a whistleblower (it’s like a digital deaddrop).

    I had a quick look and they’re going the things they need to like certificate pinning, so even corporate-level MITM wouldn’t be seeing any unusual traffic. I assume they’re also blocking access to the screen like banking apps do, which is more secure but annoying for normal users.

    source

    • HiTekRedNek@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      takes picture of screen from another device yep, so secure.

      source

      • -> View More Comments
• irotsoma@lemmy.blahaj.zone ⁨3⁩ ⁨weeks⁩ ago

  This is a significantly different use case than a secure chat application that mist in these comments are discussing. This system is more interesting for the obfuscation of the data, not the secure communication itself which is just x25519 public key encrypted messages. It’s the fact that intercepting the relevant messages from actual whistleblowers and informants is made very difficult. It’s not a chat application.

  source

  • possiblylinux127@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

    It technically is a chat app but it is specialized and built into the guardian app

    source

    • irotsoma@lemmy.blahaj.zone ⁨3⁩ ⁨weeks⁩ ago

      Not really. It’s not a real time message and there will be no status or read notification or any other realtime feedback that I would call a chat app. It can’t be realtime because the messages have to be split into chunks and those chunks are sent at regular intervals not all at once. The idea is that it there will be a constant flow of messages going to the news organization and only some of the will contain chunks of actual messages. And if the chunks are configured to be small and/or the frequency of messages is low, then if the message is large it could take a while for the full message to be transmitted. It’s closer to an encrypted email system than to a chat system TBH.

      source
• recursive_recursion@lemmy.ca ⁨3⁩ ⁨weeks⁩ ago

  Apache-2.0

  ---

  In the meanwhile
  Here are some open source messaging apps that are made to last license under AGPL-3.0:

  • SimpleX
  • Revolt Android
  • Revolt Backend

  source

  • BrikoX@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

    Not sure why Revolt is mentioned as it doesn’t even use E2EE.

    source

    • recursive_recursion@lemmy.ca ⁨3⁩ ⁨weeks⁩ ago

      Fair enough

      I’ve replaced Revolt with Monocles in my original comment

      source
  • possiblylinux127@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

    You are comparing Apples and oranges

    Also you left out Signal for some reason. It is the most popular and well known encrypted messaging app.

    source
• possiblylinux127@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

  It is a whistleblowing tool not a messaging app

  source
• BrikoX@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

  I think most orgs would still prefer Hush Line.

  source
• contrite4518@lemm.ee ⁨3⁩ ⁨weeks⁩ ago

  Wow… More… Messengers

  source

  • possiblylinux127@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

    It isn’t a messager

    source