Conversation:
Notices
-
OTOH: @WilliamTurton writes "…there’s no backdoor in WhatsApp, and according to Alec Muffett, an experienced security researcher who spoke to Gizmodo, the Guardian’s story is “major league fuckwittage.”" http://gizmodo.com/theres-no-security-backdoor-in-whatsapp-despite-report-1791158247
-
But that re-keying attack seems like an easily fixed design flaw. The keys are already separate from the hardware, so a "clean" hardware replacement should include a transfer of key material from the old hardware to the new hardware so that re-keying queued messages is not necessary. Of course, now there's the vulnerability of exposing key material during the transfer, but that co…