Instant messaging (IM) is a form of communication over the Internet, that offers quick transmission of text-based messages from sender to receiver

learn more… | top users | synonyms

1
vote
1answer
4k views

How does Wireshark detect online-messenger traffic?

I have been working on how to find use of online messenger (e.g imo.im, ebuddy) using Wireshark. I'm doing, as I need to build SIEM (security information event management) use-cases which detects ...
1
vote
1answer
102 views

Why is DARPA interested in secure messaging platform using blockchain technology?

DARPA (US Defense Advanced Research Projects Agency) has released a Request for Proposal for a Secure Messaging Platform using a blockchain framework. The following is the Objective paragraph from ...
0
votes
1answer
80 views

Is SSL not enough for a secure chat?

I was going through SSL/TLS article on wikipedia. It turns out that it provides key setup, encryption as well as authentication. The question is "isn't this enough to make a secure messaging/chat ...
11
votes
1answer
312 views

Which protocols exist for end-to-end encrypted group chat?

I am looking for existing protocols for a group chat with two things: End to end encrypted. Just what you would expect: messages are only decipherable by the chat members and message tampering is ...
2
votes
1answer
44 views

Telegram Visibility Into Secret Chat VS Plaintext

Background Telegram Messenger offers an "End-to-End" encrypted channel, with their home brewed MTProto, called Secret Chat. They have "Link Previews" by default in all modes, but Secret Chats, in ...
0
votes
1answer
55 views

Telegram messages in group are seen immediately [closed]

We have a small friends group using Telegram Messenger without any bot attached to group. When we send message in this group it is always seen (double checked) immediately even at midnight and hours ...
4
votes
2answers
306 views

How Does Telegram's Identity Verification Work?

Note: please refrain from commenting on Telegram's design of OTHER parts, as it will distract from the stem of the question. Background: Signal (Previously, "TextSecure" app) uses specific "Your ...
136
votes
5answers
128k views

Is Telegram secure?

There is a new WhatsApp-killer application called Telegram. They said that it's open source and that it has a more secure encryption. But they store all the messages in their servers and WhatsApp ...
1
vote
1answer
61 views

Making an encrypted SMS app (Android) [closed]

From my limited googling I've noticed that a lot of the mainstream encrypted messaging apps all are either (or a combination of!) closed-source, run through an uncontrolled third-party server, use a ...
1
vote
0answers
66 views

Diffie Hellman Key Exchange in a messaging application

I'm currently a student that is trying to develop a messaging application on android using java that will implement diffie hellman key exchange in order to ensure that they both will be able to ...
13
votes
2answers
492 views

How does WhatsApp's new group chat protocol work and what security properties does it have?

By now everybody has noticed that WhatsApp rolled out full end-to-end encryption recently, for direct communication, for media attachments and for group chats. I've read their white-paper (PDF) and ...
-1
votes
1answer
2k views

End-to-end WhatsApp vs Telegram [closed]

What do you think about the latest WhatsApp update? Is now WhatsApp as secure as Telegram? Which one should be trusted? Which one has the strongest and most secure encryption?
1
vote
0answers
151 views

WhatsApp end-to-end encryption for all devices [closed]

The news is out, WhatsApp switched on encryption for a billion people. It supports all devices and encrypts texts, photos, videos and calls. There are so many questions that just came to my mind ...
21
votes
1answer
3k views

How does end to end encryption work with whatsapp web?

Since today I have noticed whatsapp is using end to end encryption. However web.whatsapp.com is also still working. Does whatsapp establish a connection with my phone to keep things secure?
17
votes
2answers
3k views

Are Playstation 4 communications really harder to monitor?

I have read on the net that authorities are having troubles monitoring Playstation 4 communications. As usual the news are very non technical. What makes the Playstation 4 network harder to intercept?...
5
votes
1answer
100 views

How was iMessage broken?

It was reported today that iMessage was broken (CVE-2016-1788) by a team from John Hopkins around Matthew Green. They said it was kinda to be expected after inspecting the security guide closely ...
1
vote
2answers
383 views

Why does Telegram not use end-to-end encryption? [closed]

Signal and Telegram are both mobile applications that "try" to ensure secure chats. Signal uses end-to-end encryption, Telegram does this as well (in 'secret chats') but it does not use end-to-end ...
0
votes
2answers
168 views

Is hack.chat safe from packet sniffing?

So I recently found this tool called hack.chat. It's a disposable, browser-based IM system. If I were to use this at a friends house, public network, or at work, it is possible for someone on the ...
0
votes
1answer
69 views

How to encrypt something with a key? [closed]

I read a lot about security on the internet, especially how services like telegram work with their encryption and how they do it. I also heard of the Diffie-Hellman Key Exchange, which was quite ...
3
votes
1answer
241 views

Privacy issues when mobile app has access to phone number and contacts

It seems that when it comes to mobile apps convenience defeats security - always. In particular all messaging/communication apps seem to require to have access to your contacts on the phone and your ...
7
votes
2answers
2k views

How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?

So imagine the next situation: Alice wants to initiate OTR instant messaging session with Bob but Joe is Man In The Middle. Alice negotiates a shared secret 'X' with Joe (thinking he is Bob) using ...
4
votes
2answers
121 views

How to establish a random OTR remote party as a specific individual?

In reading Glenn Greenwald's 2014 book No place to hide, one thing stood out to me as a bit odd. Greenwald details how Edward Snowden was insistent that Greenwald install PGP in order to communicate ...
1
vote
1answer
105 views

Cloud-based IM protocols / services saving messages encrypted on server which is decryptable only by user? [closed]

I am looking for a cloud-based (i.e. not end-to-end) secure IM protocol or service. The first one comes to my mind is telegram. Here is a quote from telegram's privacy policy: Cloud Chats ...
3
votes
3answers
3k views

How to intercept and analyze mobile SSL application traffic?

What is the best way to analyze requests sent by a mobile application over SSL? The communication protocol is not necessarily HTTP/S so intercepting them with BURP/ZAP/Fiddler or any other HTTP proxy ...
0
votes
2answers
120 views

Is End to End security possible without physical contact?

I noticed that a lot of messaging start to provide "End2End" security, but I wonder how this can be possible without a key exchange between the the two clients. To my understanding to provide real ...
1
vote
1answer
171 views

Private messages for an ios app - how secure is this system?

I'm designing architecture for sending private messages (i.e. only sender and receiver are able to read a message). Client side - iOS, server side - Parse.com I'm thinking of using RSA to encrypt/...
2
votes
1answer
130 views

Why is it possible to verify RedPhone inline while not OTR text apps?

Using RedPhone (the right way), one would call, establish a connection and read off the text verification on screen to the other party. If they match, it's ZRTP-secure, if it doesn't it's MITM'd. Why ...
8
votes
5answers
19k views

Does chatting over Skype expose my IP address?

Is there a way to identify a person's IP address in Skype, when you're chatting with them? Does this depend on their Skype settings? And if you've recorded chat messages, can they lead to the actual ...
8
votes
1answer
834 views

What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?

What are the main issues and recommended controls when exposing SIP and H.323 to the Internet (could be for voice, video, and instant messaging traffic or all three)? Specifically I'm looking for ...
1
vote
0answers
127 views

Has Stackfield been security audited and is the metadata safe?

It appears that Stackfield is one of the only functioning applications that combines end to end encryption, messaging services and file sharing. Peerio has just been launched (literally a day or two ...
-1
votes
1answer
225 views

Surespot versus government surveillance [closed]

Does anyone know how tight is surespot encryption? .. Does this the government a really hard time decrypting messages or is it simple like they would get it right away. .. Like imagine I was resisting ...
19
votes
8answers
26k views

Which Instant Messaging services use or allow secure protocols, and what do those protocols cover?

We all know there's a myriad of Instant Messaging (IM) services out there. But, which of these services uses or permits protocols that actually secure your communications? For those that do, what ...
1
vote
1answer
425 views

TextSecure/WhisperPush instant messaging by Open Whisper Systems: End-to-end encrypted or not?

Open Whisper Systems claims that its TextSecure messaging is end-to-end encrypted, but at the same time there are now some rather serious allegations of how it might be betraying its users. If I ...
12
votes
5answers
19k views

Can Skype chat be protected from snooping? Are there safe alternatives?

I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
7
votes
2answers
3k views

Are Telegram secret chats secure assuming MTProto isn't?

For those who don't know: Telegram is a partially open source Whatsapp alternative (Server is closed source) which offers secret chats and normal chats. Secret chats are encrypted with Diffie-Hellman ...
0
votes
2answers
480 views

Why no one makes a message application like whatsapp using RSA keys?

I'm really new and I may sound like a noob so please forgive me. Since gnupg is avaible for android, why does no one makes an app that encrypts every message using a rsa key and just swap the keys ...
1
vote
2answers
1k views

Is there any documentation or reviews about LINE messenger security?

I tried to find any documentation about the security of LINE messenger, but I couldn't. Is there any documentation or reviews about the communication protocol it uses, and whether or not it uses end-...
5
votes
3answers
1k views

Asymmetric Key Encryption in Group Chat

I am working on a chat application which supports both single user chat as well as group chat. We planned to encrypt messages in single user chat by public key of receiver and decrypt it using ...
1
vote
0answers
165 views

Instant Messaging End-to-End

I plan to create an application for secure instant messaging, now I don't know whether or not I want to implement the encryption by myself. This project is also mainly for educational purpose so I ...
1
vote
1answer
834 views

Are WhatsApp or Telegram secure enough to use for office communication?

We are thinking about switching from e-mail to instant messaging. Do you think, Apps like WhatsApp or Telegram provide enough security for that?
1
vote
0answers
256 views

Does Diffie-Hellmann (DH) key exchange protocol lower Off-The-Record protocol (OTR) security level?

Off-the-Record protocol employes Diffie-Hellman key exchange protocol (DH). DH protocol does not provide authentication of the communicating parties and, according to many sources, is vulnerable to ...
18
votes
2answers
10k views

The inner workings of iMessage security?

This is a very interesting article about the iMessage technology used in Apple's very popular communication devices. So far, there has not been much technical details released by Apple. Hopefully ...
2
votes
1answer
491 views

xmpp ssl cipher negotiation

Does anyone know how ssl ciphers are nogitiated via the xmpp protocol. When I capture packets, I see: <starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/> There is no hello server/client or ...
11
votes
5answers
3k views

Can voice chat be spied?

I wonder if voice chat (via public services like yahoo, google talk, skype, etc) is practically secure? Is it possible for the ISP or any middle point? I do not consider hacking the computers, but ...
1
vote
0answers
555 views

OTR and/or SecureIM library for C# .NET [closed]

I'm looking for implementations (or even wrappers) for OTR or SecureIM encrypted chat protocols usable from C#. Currently I found none, and considering porting Java OTR library and/or wrapping ...
1
vote
2answers
204 views

How can I catch an Instant Messenger Identity Thief?

Here is the scheme. The identity thief logs in as my American friend in the instant messaging program QQ. (Did he steal her password or use some other exploit? I don't know.) The thief contact's ...
7
votes
5answers
2k views

Most Efficient way of Encrypted Chat

I'm creating a server where people can come and talk to each other. I'm mostly doing it for a fun project, here's my question. I'm using RSA for encryption/decryption, so only the clients will know ...
3
votes
1answer
317 views

What project is a good SILC substitute?

As time has marched on, it would appear that the Secure Internet Live Conferencing (SILC) client/toolkit have lost a bit of steam, I can't find any current mailing lists, their website doesn't seem to ...
2
votes
0answers
215 views

Does OtR require than IM applications remember multiple keys per contact? [closed]

I noticed the Guardian Project has developed a converter to move your off-the-record messaging keys between different IM applications. I'm curious what happens if your using multiple off-the-record ...
2
votes
3answers
2k views

Which real time cross-platform chat applications exist with end-to-end encryption?

I am looking for an instant messaging / chat application which can be used securely across different platforms, eg Windows, Linux, BSD! Do any exist?