NerdHouse Social
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Deep@mander.xyz to Technology@lemmy.worldEnglish · 2 months ago

German members of parliament (MPs) advised to drop Signal in favor of Wire over security concerns

cyberinsider.com

external-link
message-square
14
link
fedilink
3
external-link

German members of parliament (MPs) advised to drop Signal in favor of Wire over security concerns

cyberinsider.com

Deep@mander.xyz to Technology@lemmy.worldEnglish · 2 months ago
message-square
14
link
fedilink
German MPs advised to drop Signal in favor of Wire over security concerns
cyberinsider.com
external-link
Germany is moving to standardize on the Wire messaging platform following a wave of phishing attacks targeting politicians on Signal.
  • nymnympseudonym@piefed.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    Thank you. I do wish the public conversation were more about actual tech vs social engineering and public-vibe opinion.

    I like the fact that Wire uses a separate key for every device and every 2-person pair, even in a group chat.

    But I hate how much metadata that Wire leaks. I do not want my ISP/VPN provider to be able to track where I am and with whom I am messaging. IP addresses, routing paths, packet sizes, timing…

    Both protocols encrypt what you say. Wire betrays where you were when you said it and gives a lot more clues about who you said it to. Exactly what you want people to use, if you are a nation-state able to monitor corporate ISPs and VPNs.

    • RecursiveParadox@piefed.social
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 months ago

      But I hate how much metadata that Wire leaks.

      This is the first I have heard of this - can you point me to any sites?

      • nymnympseudonym@piefed.social
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 months ago
        • Wire API calls use WebRTC, DTLS, SRTP, and TURN relays, which all encrypt data but leak metadata
        • Creator, timestamp, participants, devices, and group name are stored server-side https://github.com/wireapp/wire/issues/103
        • Server therefore can infer who is connected to whom and which devices belong to each account https://github.com/wireapp/wire/issues/214
        • No mitigation from timing attacks https://www.research-collection.ethz.ch/bitstreams/669f99ed-bbdc-4818-b0b9-0519e0427d42/download
        • RecursiveParadox@piefed.social
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 month ago

          Thanks for the very detailed reply! I’ll check into it.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 5.81K users / day
  • 10.6K users / week
  • 16.7K users / month
  • 31.8K users / 6 months
  • 1 local subscriber
  • 85.6K subscribers
  • 13.5K Posts
  • 489K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
    cake
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.world
  • L3s@hackingne.ws
  • BE: 0.19.15
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org