tomgag (@tomgag@infosec.exchange)
Interesting paper on Eprint: A Quantum-Safe Private Group System for Signal from Key Re-Randomizable Signatures
https://eprint.iacr.org/2026/453
E2E encryption in group chats is complex, because security should be many-to-many while allowing for large, dynamic groups. Signal uses state of the art cryptography for this, but it's mostly based on discrete log, so quantum-vulnerable. This paper proposes a new, efficient quantum-resistant construction for this task.
A few caveats by having just a quick skim at the paper:
1) Not everything is quantum-resistant, only parts of the protocol, namely those inherent to privacy. Authentication, instead, is left quantum-vulnerable. The rationale is that harvest-now-decrypt-later attacks are of a more immediate concern, and partial patching allows to not degrade performance too much. While this is a sensitive and pragmatic choice, I think the security community should stop underestimating the danger of trust-now-forge-later attacks, i.e. those involving signatures/authentication: In real-world scenarios, those would probably be much more dangerous than "we'll just switch to PQ signatures when quantum computers arrive". The paper considers this as well, though, as the choice of authentication mechanisms is modular, thereby providing crypto agility.
2) The role of the central server is still crucial to ensure correct execution of the protocol. This is just a reminder that Signal, at the end of the day, is a centralized service. It's way, way better than your Whatsapp, but if centralization is a concern, please consider federated or peer-to-peer alternatives (although Signal's encryption is undoubtedly the gold standard for now).
#signal #cryptography #privacy #security #im #whatsapp #quantum #quantumcomputing #postquantum #pqc
Show Original Post
r (@r@fed.brid.gy)
Threema gibt es wieder kostenfrEI zu #Ostern. In genau 4 Wochen ist es wieder so weit, jeder #Threema User der am Osterrätsel teilnimmt, bekommt 3 Lizenzen im Wert von 18 EUR geschenkt. Folge mir und verrate Dir, wie Du noch mehr bekommst! #Whatsapp #Signal #UnplugBigTech #Telegram #Diday #Didit
Show Original Post
valguard (@valguard@ohai.social)
In my country the mass used #messengers are #viber #Facebook messenger and #WhatsApp - non of them is my fitst choice. I use #Threema for my family communication and #Signal for public use, unfortunately I am finding very difficult to convince others to use it.
How you tackle this?
Show Original Post
vforvendetta (@vforvendetta@mastodon.uno)
Edward Snowden nel 2019: "Il problema cn #WhatsApp è che é stato progettato per avere una crittografia molto forte, proprio come lo standard di riferimento #Signal o #Wire, ma poi é stato acquistato da #Facebook perché era così buono, e ora Meta sta riducendo in modo piuttosto aggressivo la sicurezza di WhatsApp circa una volta al trimestre, e stanno cercando di farlo nel modo più discreto possibile, quindi un messenger che le persone ora usano tranquillamente è in realtà un pericolo per te."
Show Original Post
micdan5 (@micdan5@mastodon.social)
#WhatsApp planea moverse a un modelo de suscripción. Simplemente increíble... (sarcásticamente, obvio)
Esto es pésimo, porque aunque podría incentivar a las personas a usar alternativas como #Signal, que son acompletamente gratuitas, como todo el mundo está en WhatsApp, Meta se aprovecha d e esto haciendo que la mayoría de usuarios terminen pagando, así también vulnerando su privacidad y seguridad.
Por eso si tienes familiares y amigos que mudes a #Signal, es lo mejor.
https://www.androidpolice.com/whatsapp-will-soon-join-the-premium-subscription-club/
Show Original Post
schmidtisblog (@schmidtisblog@mastodontech.de)
WhatsApp Datenschutz optimieren: So sicherst du dein Konto und deine Chats richtig
https://www.schmidtisblog.de/whatsapp-datenschutz-optimieren-so-sicherst-du-dein-konto-und-deine-chats-richtig-1795090/
Show Original Post
tugatech (@tugatech@masto.pt)
WhatsApp para Android recebe novo design arredondado nas bolhas de mensagens
🔗 https://tugatech.com.pt/t79729-whatsapp-para-android-recebe-novo-design-arredondado-nas-bolhas-de-mensagens
Show Original Post
GreaterGrander (@GreaterGrander@mastodon.social)
#Toyota job offer… on #WhatsApp? 🚩
Real recruiters use company email and phone. Scammers use random channels, weird country codes, and fake domains like Toyo10.
If the job pays $300 for 90 minutes, it’s not recruiting. It’s bait.
Spot the scam. Block it. Subscribe.
#Cybertruck #Ferrari #AndrewTate #JobScam #HiringScam #RecruitmentFraud #TechScams #OnlineSafety
Show Original Post
misryoum (@misryoum@mastodon.social)
ما هو “WhatsApp Plus” خدمة المراسلة المدفوعة القادمة من ميتا؟
https://misryoum.com/cars/whatsapp-plus-dmh-lmraslh-lmdfwah/
تعمل منصة واتساب المملوكة لشركة ميتا Meta، على تطوير خدمة اشتراك مدفوعة جديدة تعرف باسم WhatsApp Plus، والتي من المقرر توفرها على أجهزة أندرويد وiOS. ووفقا للتقارير، ستظل المميزات الأساسية لخدمة واتساب مجانية، مثل المراسلة النصية والمكالمات ومشاركة الوسائط، بينما...
#WhatsApp #Plus #خدمة #المراسلة #المدفوعة #القادمة #ميتا #منصة_مصر_اليوم_الاخبارية #misryoum_com
Show Original Post
New_Joerg (@New_Joerg@norden.social)
@parki Wer sich in #WhatsApp begibt, kommt darin um.
Show Original Post
chris (@chris@tooting.ch)
@schtigleflute En #Russie ils pousse #MAX pour remplacer #Whatsapp et #telegram
Chez nous c'est pas mieux. Carte identité pour avoir un compte social. J'espère qu'on pourra toujours avoir le fédiverse libre et anonyme si on le veut.
Show Original Post
c (@c@piefed.zip)
Brazilian Federal Police can reportedly reverse WhatsApp's "view once" messages
It was reported in Brazil last week that the Federal Police was able to access previously displayed WhatsApp "view once" messages during an "extraction carried out by specific software that jointly displays the messages and files sent, reversing, in practice, the single view of the message" .
Here follows the original report, in Portuguese, and a quick translation to English.
Emphases and text within square brackets on the translation are my own.
Original Report
Mensagens trocadas entre Vorcaro e Moraes foram extraídas e periciadas pela PF, diz jornal
Reportagem publicada pelo blog da jornalista Malu Gaspar, do jornal “O Globo”, trouxe prints de mensagens atribuídas ao banqueiro Daniel Vorcaro enviadas ao ministro Alexandre de Moraes horas antes de Vorcaro ser preso pela primeira vez.
O jornal o Globo publicou, na noite desta sexta-feira (6), uma reportagem informando que os dados das mensagens trocadas no dia 17 de novembro entre Daniel Vorcaro e o ministro Alexandre de Moraes, do Supremo Tribunal Federal (STF), foram retirados do celular do dono do Master por meio de análise técnica da Polícia Federal (PF), e que essa análise permite visualizar, ao mesmo tempo, a tela de whatsapp com as mensagens e as imagens de visualização única nela contida.
O jornal informa também que, diferentemente do material enviado à CPMI do INSS, o conteúdo a que o Globo teve acesso não é fruto de comparação entre os horários dos textos que constam em blocos de nota de Vorcaro e as mensagens enviadas por ele, embora coincidam, e sim resultado da extração realizada por um software específico que exibe conjuntamente as mensagens e os arquivos enviados, revertendo, na prática, a visualização única da mensagem.
English Translation
Messages exchanged between Vorcaro and Moraes were extracted and examined by the Federal Police, says newspaper
A report published by journalist Malu Gaspar’s blog, from the newspaper “O Globo”, brought prints of messages attributed to banker Daniel Vorcaro sent to minister Alexandre de Moraes hours before Vorcaro was arrested for the first time.
The newspaper “O Globo” published, on the night of this Friday (6), a report informing that the data of the messages exchanged on November 17th between Daniel Vorcaro and Minister Alexandre de Moraes, of the Federal Supreme Court (STF), were removed from the [banker’s] cell phone through technical analysis by the Federal Police (PF), and that this analysis allows viewing, at the same time, the WhatsApp screen with the messages and the single-view images contained therein.
The newspaper also informs that, unlike the material sent to [a National Congress investigation], the content that “O Globo” had access to is not the result of a comparison between the times of the texts contained in Vorcaro’s notebooks and the messages sent by him, although they coincide, but rather the result of extraction carried out by specific software that jointly displays the messages and files sent, reversing, in practice, the single view of the message .
Show Original Post