Printer-friendly copy Email this topic to a friend
Lobby General Discussion topic #13266849

Subject: "Encrypted no longer means encrypted? Are messaging apps secure anymore?" Previous topic | Next topic
PimpTrickGangstaClik
Member since Oct 06th 2005
15894 posts
Fri Jun-15-18 02:38 PM

Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
"Encrypted no longer means encrypted? Are messaging apps secure anymore?"


          

Were they ever secure?
The feds seem to have no problem getting messages sent through Signal and Telegram. I was under the impression that they were super secure, uncrackable communications.

How is the FBI getting these messages from Manafort, Cohen, etc?

_______________________________________

  

Printer-friendly copy | Reply | Reply with quote | Top


Topic Outline
Subject Author Message Date ID
I’d imagine it’s the device they’re breaking into, not the messagi...
Jun 15th 2018
1
^pretty clear they have access to the device the msgs are stored on
Jun 15th 2018
13
nothing is safe
Jun 15th 2018
2
apps arent secure period
Jun 15th 2018
3
If you expect to do business in the USA, any three letter org
Jun 15th 2018
4
end to end encryption would make this not work.
Jun 15th 2018
8
this isnt true.
Jun 15th 2018
15
More likely ... the idiots involved kept saving shit
Jun 15th 2018
5
There have been some scandals recently,
Jun 15th 2018
6
Remember browsers being forced to have export grade crypto?
Jun 16th 2018
18
So, encrypted messages *are* secure.
Jun 15th 2018
7
This is it...they don't have to break the crypto.
Jun 16th 2018
17
Prosecutors said Manafort used a method called "foldering"
Jun 15th 2018
9
Same thing Patreaus did
Jun 15th 2018
10
these cats are so bad at crime
Jun 15th 2018
11
The digital version of keistering.
Jun 15th 2018
12
this was revealed when his daughters iphone/icloud got hacked
Jun 15th 2018
14
Unredacted government exhibit showing alleged attempts by Manafort and K...
Jun 15th 2018
16

Innocent Criminal
Member since May 03rd 2003
14585 posts
Fri Jun-15-18 02:56 PM

Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
1. "I’d imagine it’s the device they’re breaking into, not the messagi..."
In response to Reply # 0


  

          

Of course, nothing is bulletproof, but it’s easier to get into the device than break the app encryption.

________________________________
There are dozens of us! Dozens!

  

Printer-friendly copy | Reply | Reply with quote | Top

    
Reeq
Member since Mar 11th 2013
16347 posts
Fri Jun-15-18 06:21 PM

Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
13. "^pretty clear they have access to the device the msgs are stored on"
In response to Reply # 1


          

or the device the messages were sent to and then stored on (in the case of manafort and the journalists) or icloud backups (also in the case of manafort).

basically people using these apps are just focusing on the safeguards to information being intercepted during transit. they arent accounting for people gaining access to their device (not deleting the messages and any backups of the messages).

  

Printer-friendly copy | Reply | Reply with quote | Top

legsdiamond
Member since May 05th 2011
79545 posts
Fri Jun-15-18 02:58 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
2. "nothing is safe"
In response to Reply # 0


          

****************
TBH the fact that you're even a mod here fits squarely within Jag's narrative of OK-sanctioned aggression, bullying, and toxicity. *shrug*

  

Printer-friendly copy | Reply | Reply with quote | Top

DavidHasselhoff
Charter member
11451 posts
Fri Jun-15-18 03:17 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
3. " apps arent secure period"
In response to Reply # 0


          

  

Printer-friendly copy | Reply | Reply with quote | Top

imo
Member since Aug 09th 2007
2144 posts
Fri Jun-15-18 03:19 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
4. "If you expect to do business in the USA, any three letter org "
In response to Reply # 0


  

          

can get you to put in a passive tap and redirect traffic to be inspected in the name of security.

Privacy does not exist. Keep your nose clean

"hey, make this right mayne
stop at the light mayne,
my yester night thang got me hung off the night train "

  

Printer-friendly copy | Reply | Reply with quote | Top

    
Rjcc
Charter member
94958 posts
Fri Jun-15-18 04:23 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy listClick to send message via AOL IM
8. "end to end encryption would make this not work."
In response to Reply # 4


          


www.engadgethd.com - the other stuff i'm looking at

  

Printer-friendly copy | Reply | Reply with quote | Top

    
Reeq
Member since Mar 11th 2013
16347 posts
Fri Jun-15-18 07:00 PM

Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
15. "this isnt true."
In response to Reply # 4


          

the feds would have to be snooping/monitoring on the physical gateway/exchange servers...via hack or the service handing over access (pr nightmare).

and like rjcc said...e2ee still makes it impossible without possessing one of the ends/devices.

not even the services themselves can decipher your communications. the most they could come away with is which user is communicating with you.

  

Printer-friendly copy | Reply | Reply with quote | Top

MEAT
Member since Feb 08th 2008
22255 posts
Fri Jun-15-18 03:23 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
5. "More likely ... the idiots involved kept saving shit"
In response to Reply # 0


  

          

Encryption isn’t fool proof
The government does run foul often
But if there’s one thing above all else with this is that these jamokes involved are flagrant AND dumb

------
“There is no fate that cannot be surmounted by scorn.” -Albert Camus

  

Printer-friendly copy | Reply | Reply with quote | Top

stravinskian
Member since Feb 24th 2003
12698 posts
Fri Jun-15-18 03:32 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
6. "There have been some scandals recently,"
In response to Reply # 0
Fri Jun-15-18 03:34 PM by stravinskian

          

where NSA entered into "research collaborations" with NIST (the National Institute of Standards and Technology), creating new state-of-the-art random number generators, which are essential for most encryption schemes. The scandal was that NSA inserted certain non-random behaviors that could be used to create backdoors in the encryptions, if you know about them.

This was a few years ago, though, and I assume everyone's moved on from it. That said, it was a surprising demonstration of just how far NSA would go to break encryption.

But I concur with everyone else in here: the much easier way to capture encrypted messages is to unlock the phone that sent or received them. For that, I assume it's mostly just standard jailbreaking tricks.

  

Printer-friendly copy | Reply | Reply with quote | Top

    
nonaime
Charter member
3117 posts
Sat Jun-16-18 06:18 AM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
18. "Remember browsers being forced to have export grade crypto?"
In response to Reply # 6


          

This came back to bite us in the butt through SSL downgrade attacks. We'll be looking at the same sort of things happening if the NSA's monkeying around with ECC is true....hell, these guys can't even control their own tools (see: Shadow Brokers)

~~~~~~~~
A bad Samaritan averaging above average men (c) DOOM

  

Printer-friendly copy | Reply | Reply with quote | Top

Rjcc
Charter member
94958 posts
Fri Jun-15-18 04:22 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy listClick to send message via AOL IM
7. "So, encrypted messages *are* secure."
In response to Reply # 0


          

but the devices you use to send and receive them are not.

so if the FBI or whoever gets your phone, or the phone of the person you're talking to, and the messages are there....guess what your encrypted messages are now unencrypted messages.


also, even without that, just the metadata -- which even signal can't really hide -- is something the feds can always get, and if they know who you were talking to, when and how much, they can figure out the rest.


www.engadgethd.com - the other stuff i'm looking at

  

Printer-friendly copy | Reply | Reply with quote | Top

    
nonaime
Charter member
3117 posts
Sat Jun-16-18 06:11 AM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
17. "This is it...they don't have to break the crypto."
In response to Reply # 7


          

~~~~~~~~
A bad Samaritan averaging above average men (c) DOOM

  

Printer-friendly copy | Reply | Reply with quote | Top

j0510
Member since Feb 02nd 2012
2315 posts
Fri Jun-15-18 05:16 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
9. "Prosecutors said Manafort used a method called "foldering""
In response to Reply # 0


  

          

Prosecutors said Manafort used a method called "foldering" to covertly talk to people. It's not that complicated: He made an email account and shared the password. He wrote messages but saved them as drafts, never sending actual emails. Other guys open the draft, read it, delete.

https://twitter.com/MarshallCohen/status/1007667538786963456


^^^I know this doesn't directly answer your question but this is one method Manafort is alleged to use.

  

Printer-friendly copy | Reply | Reply with quote | Top

    
MEAT
Member since Feb 08th 2008
22255 posts
Fri Jun-15-18 05:19 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
10. "Same thing Patreaus did"
In response to Reply # 9


  

          

It’s good to hide from your spouse. Bad for anyone that can get records of up addresses.
Particularly someone that’s being physically monitored.

Well his ankle bracket says that he’s here I’m NY, what is this Balkans ip acceding this account.

------
“There is no fate that cannot be surmounted by scorn.” -Albert Camus

  

Printer-friendly copy | Reply | Reply with quote | Top

    
Rjcc
Charter member
94958 posts
Fri Jun-15-18 05:20 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy listClick to send message via AOL IM
11. "these cats are so bad at crime"
In response to Reply # 9


          


www.engadgethd.com - the other stuff i'm looking at

  

Printer-friendly copy | Reply | Reply with quote | Top

    
Innocent Criminal
Member since May 03rd 2003
14585 posts
Fri Jun-15-18 05:40 PM

Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
12. "The digital version of keistering. "
In response to Reply # 9


  

          

________________________________
There are dozens of us! Dozens!

  

Printer-friendly copy | Reply | Reply with quote | Top

    
Reeq
Member since Mar 11th 2013
16347 posts
Fri Jun-15-18 06:29 PM

Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
14. "this was revealed when his daughters iphone/icloud got hacked"
In response to Reply # 9


          

https://www.cnn.com/2017/03/10/politics/ukraine-manafort-hacked-texts/index.html

----------
In the same 2015 conversation with her sister, Andrea allegedly suggests to Jessica that their father used covert methods to send messages to Ukraine.
"I was there when it happened. I saw him on his shady email," she allegedly wrote. "They don't write emails. They log on and write in the drafts So it's never transmitted over any servers."
----------

his email password was also cracked after that lol
http://www.newsweek.com/paul-manaforts-password-was-bond007-making-him-worst-unregistered-foreign-698751

  

Printer-friendly copy | Reply | Reply with quote | Top

j0510
Member since Feb 02nd 2012
2315 posts
Fri Jun-15-18 08:18 PM

Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
16. "Unredacted government exhibit showing alleged attempts by Manafort and K..."
In response to Reply # 0


  

          

Unredacted government exhibit showing alleged attempts by Manafort and Kilimnik to influence witness testimonies has been released. The witnesses, journalists Alan Friedman and Eckart Sager, produced the messages to the FBI.

https://pbs.twimg.com/media/DfmI6vHW4AARN2p.jpg


https://twitter.com/NatashaBertrand/status/1006986884550098944

  

Printer-friendly copy | Reply | Reply with quote | Top

Lobby General Discussion topic #13266849 Previous topic | Next topic
Powered by DCForum+ Version 1.25
Copyright © DCScripts.com