Deep@mander.xyz to Technology@lemmy.worldEnglish · 4 days agoGerman members of parliament (MPs) advised to drop Signal in favor of Wire over security concernscyberinsider.comexternal-linkmessage-square39linkfedilinkarrow-up1218arrow-down113
arrow-up1205arrow-down1external-linkGerman members of parliament (MPs) advised to drop Signal in favor of Wire over security concernscyberinsider.comDeep@mander.xyz to Technology@lemmy.worldEnglish · 4 days agomessage-square39linkfedilink
minus-squarenymnympseudonym@piefed.sociallinkfedilinkEnglisharrow-up2·edit-21 day ago Wire API calls use WebRTC, DTLS, SRTP, and TURN relays, which all encrypt data but leak metadata Creator, timestamp, participants, devices, and group name are stored server-side https://github.com/wireapp/wire/issues/103 Server therefore can infer who is connected to whom and which devices belong to each account https://github.com/wireapp/wire/issues/214 No mitigation from timing attacks https://www.research-collection.ethz.ch/bitstreams/669f99ed-bbdc-4818-b0b9-0519e0427d42/download
minus-squareRecursiveParadox@piefed.sociallinkfedilinkEnglisharrow-up2·16 hours agoThanks for the very detailed reply! I’ll check into it.
Thanks for the very detailed reply! I’ll check into it.