EvilZone

Community => General discussion => Topic started by: khofo on September 05, 2015, 07:02:56 PM

Title: secure messaging service
Post by: khofo on September 05, 2015, 07:02:56 PM
As everyone knows true anonymity is impossible, I am not talking about it here. What I am looking for is an app that provides non-widely compromised encryption. Not SSH Entreprise grade encryption but secure enough to not be subject to masw surveillance. Also the account or client shall require minimun information as in no access to Location, email, phone number etc... Just username and password if possible, if it's email only then with mailinator I'll be fine.

So if anyone have any idea about such service please share
Title: Re: secure messaging service
Post by: gray-fox on September 05, 2015, 07:19:17 PM
You may be intrested to read this https://www.eff.org/secure-messaging-scorecard . Not maybe directly answering your question but at least it's strongly related.

edit: hmm. I thought whatsapp is suppose(/claimed) to be end-to-end encrypted these days, but that site seems to claim otherwise.
Title: Re: secure messaging service
Post by: khofo on September 05, 2015, 09:32:29 PM
You may be intrested to read this https://www.eff.org/secure-messaging-scorecard . Not maybe directly answering your question but at least it's strongly related.

edit: hmm. I thought whatsapp is suppose(/claimed) to be end-to-end encrypted these days, but that site seems to claim otherwise.


Thank you for the eff article, and when it comes to Whatsapp I know for a fact it's compromised, since all the drug seizures were done via the interception of whatsapp communication, also your whatsapp account is linked to your mobile number which directly links to my name (by law)
Title: Re: secure messaging service
Post by: TheWormKill on September 05, 2015, 09:39:40 PM
Well, your question is very general and vague, so my answer will be, too.

Telegram provides encryption, but needs your phone number. However, some people dislike it for various reasons. It is still assumed to be more secure than WhatsApp, but that seems to be nothing to be proud of.
Also note that you can use a phone number associated with a SIM card that is prepaid and can be acquired
at a supermarket, gas station etc. without your name being registered in any way.
Combining this with some other measures of anonymization and a
short timespan during which you use a specific service via a specific device etc., it is theoretically possible
to achieve a certain amount of anonymization.

As you see, there is a lot of factors that affect the result.
Title: Re: secure messaging service
Post by: khofo on September 06, 2015, 12:11:17 AM
Well, your question is very general and vague, so my answer will be, too.

Telegram provides encryption, but needs your phone number. However, some people dislike it for various reasons. It is still assumed to be more secure than WhatsApp, but that seems to be nothing to be proud of.
Also note that you can use a phone number associated with a SIM card that is prepaid and can be acquired
at a supermarket, gas station etc. without your name being registered in any way.
Combining this with some other measures of anonymization and a
short timespan during which you use a specific service via a specific device etc., it is theoretically possible
to achieve a certain amount of anonymization.

As you see, there is a lot of factors that affect the result.


Where I live for security reasons even prepaid lines are registered in your name, I do not think services like telegram are efficient but in the list gray-fox provided are some not very "famous" clients which are less likely to be compromised "hopefully"
Title: Re: secure messaging service
Post by: proxx on September 06, 2015, 12:33:26 AM
As everyone knows true anonymity is impossible, I am not talking about it here. What I am looking for is an app that provides non-widely compromised encryption. Not SSH Entreprise grade encryption but secure enough to not be subject to masw surveillance. Also the account or client shall require minimun information as in no access to Location, email, phone number etc... Just username and password if possible, if it's email only then with mailinator I'll be fine.

So if anyone have any idea about such service please share
If you wanna go bunny style you can just preencrypt the mes with AES and send that.
Sharing a key must be done by secure means though , after that you can pretty much use anything.
Title: Re: secure messaging service
Post by: Xires on September 06, 2015, 08:25:14 AM
Can you be more specific about the message type?  Are you looking for an active connection between two clients or the ability to send a message to be read later(like via e-mail)?

PKI tends to work very well so I would strongly suggest looking into that.  If you're wanting to build the service yourself, there is plenty of documentation available.  If you're looking for an existing service, you may be able to locate one that uses PKI already.  You may also consider looking into I2P.
Title: Re: secure messaging service
Post by: vanity on September 06, 2015, 08:53:32 AM
Have you looked into the wickr app? is supported by encryption key which you can view and manually type rather than send over sms. Is that the kind of messaging you are talking about? sms? also has a desktop chat client. It does not link to the phone number or email address just the user name you create
Title: Re: secure messaging service
Post by: khofo on September 06, 2015, 11:04:57 AM

To be specific I was looking for way to communicate via mobile devices over a an instant messenger platform, which provides a good encryption of the message over Broadband and WiFi. The other party is a stoneman who owns an  iPhone and thus I can't create my own client even if I wanted to and assuming that I know how. But thank you all for your feedback, I really appreciated all the replies.


And when  it comes to the app itself I finally decided to go with Silent Text (https://www.silentcircle.com (https://www.silentcircle.com))


You can read more about it on their website, it can work without an email and the functionalities are neat. I did like the auto-destroy message where a message is destroyed from both devices after a certain time. I do not know how it's "destroyed", but also being available on iPhone and the fact that it's being still supported are great too.

I will leave this thread open for future discussion about secure messaging in general, which is a very relevant topic nowadays.
Title: Re: secure messaging service
Post by: kenjoe41 on September 06, 2015, 08:20:24 PM
Aint you in luck, i was gonna strongly suggest silent circle's secure text app.
And when things get hard, invest in their BlackPhone.
Title: Re: secure messaging service
Post by: nrael on September 07, 2015, 06:23:36 PM
https://crypto.cat/

or

https://hack.chat
Title: Re: secure messaging service
Post by: iTpHo3NiX on September 07, 2015, 07:05:56 PM
I wish they didn't disband heml.is
Title: Re: secure messaging service
Post by: whatitdo on September 13, 2015, 01:29:37 AM
I suggest Wickr for long-term communications, or cryptocat if you want a temporary chatroom
Title: Re: secure messaging service
Post by: queryFrequency on September 14, 2015, 02:05:34 AM
Try https://www.wickr.com/ (https://www.wickr.com/).
Title: Re: secure messaging service
Post by: khofo on September 14, 2015, 02:14:13 AM
Wickr seems as a very reliable service, thank you for sharing. Testing now.
Title: Re: secure messaging service
Post by: Katheudo on September 17, 2015, 01:04:05 AM
I have recently found this online service https://privatoria.net/ I am not 100% sure how decent it is but I am sure you can take a look. It all seems ok so far and a good service.
Title: Re: secure messaging service
Post by: iTpHo3NiX on September 18, 2015, 09:15:53 AM
I have recently found this online service https://privatoria.net/ I am not 100% sure how decent it is but I am sure you can take a look. It all seems ok so far and a good service.

I'll vouch for privatoria, I've only used it for a couple of hours, but a fast alternate DNS (use as main, google as secondary) vpn, encrypted email, bitcoin payments, $22/yr this is my new goto service as far as vpns and proxies. Have a new email Addy now for shit. Great service so far, no problems or hiccups, easy mobile app, etc.
Title: Re: secure messaging service
Post by: Katheudo on September 18, 2015, 10:51:31 AM
Well then I might have to purchase their 1 year plan. I have also used the trial and I am impressed. Again with me it seems there has been no problems and it is a great service. Also because we have to pay we some what know we are not the product, if you get me.
Title: Re: secure messaging service
Post by: khofo on September 18, 2015, 07:01:33 PM
I have recently found this online service https://privatoria.net/ I am not 100% sure how decent it is but I am sure you can take a look. It all seems ok so far and a good service.

It seems really neat, as per iTpHo3NiX's reply it seems reliable too, thank you for sharing and I'll definitely take it into consideration :)
Title: Re: secure messaging service
Post by: Katheudo on September 18, 2015, 08:06:00 PM
It seems really neat, as per iTpHo3NiX's reply it seems reliable too, thank you for sharing and I'll definitely take it into consideration :)

No problem, I think I will sign up to :D The trial was good!