Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [instant-messaging]

Instant messaging (IM) is a form of communication over the Internet, that offers quick transmission of text-based messages from sender to receiver

0
votes
1answer
175 views

Man-in-the-middle attacks in end-to-end encryption

I am reading about how to implement end-to-end encryption in IMs. Then I find this question. I cannot understand how the man-in-the-middle attack happens when the author of the answer says: Note ...
9
votes
1answer
199 views

Private messaging for protesters

Hello I am a protester in Hong Kong. Many protesters use telegram group. I have heard recently from the News that a group admin was tricked by the police to unlock their phone (police cannot force ...
2
votes
1answer
71 views

Perfect forward secrecy in Instant Messaging with multiple devices

I have read multiple sites online about PFS and DH but I still have a few questions. I understand that in order to have PFS you must use different keys to encrypt messages. So your IM client could be ...
2
votes
2answers
141 views

Prevent ourselves from seeing messages

Background We are an API provider. We are unifying 3rd party messengers where we can't control the client app. What we need Even though we need to provide the 3rd party messengers with the ...
4
votes
1answer
64 views

Is forward secrecy useful for an application where keeping message history is an integral part?

I am writing a decentralized application that lets certain privileged users post messages to other users. These messages should be encrypted so that only the two of them can read it. Messages are ...
2
votes
2answers
217 views

Why do we need OMEMO if XMPP is already encrypted?

I read that XMPP is encrypted. E.g. Wikipedia says: Strengths Security XMPP servers can be isolated (e.g., on a company intranet), and secure authentication (SASL) and encryption (TLS) ...
6
votes
1answer
381 views

How do end-to-end encrypted chat services ensure that the server admin doesn't add new members to a chat?

This question is about any chat service that supports end-to-end encrypted group chats, for instance Signal, XMPP + OMEMO (closed group chats in particular), WhatsApp, and the like. How do these ...
0
votes
2answers
803 views

Can my school read my GroupMe messages since they are not end-to-end encrypted?

I used GroupMe on my personal phone on my school WiFi and sent some very private messages. I have confirmed that my school is not performing a MITM attack by comparing grc fingerprints. However, I’...
0
votes
1answer
202 views

Can malware be installed on a mobile phone when the user opens an sms?

Is it possible for an adversary send malware over messages? I mean, when the victim clicks on the message sent by the attacker, a malware should be installed into his phone (in background). The hacker ...
2
votes
1answer
146 views

Can Apple technically intercept iMessage messages

I'm basing this question off the iOS Security Guide. If I understand this correctly, when you enlist in iMessage, the private key stays on your device, while the public key is pushed to a directory ...
3
votes
1answer
3k views

Telegram: Security risks for a user of using third-party socks5 proxy?

If a user decides to use a third-party SOCKS5 proxy for his Telegram client, what are possible security risks for the user? Specifically if the proxy suggests using the same login and password for ...
7
votes
2answers
598 views

Is loss of conversation history inherent to end-to-end encryption?

The Wire web app can relatively easily lose conversation history completely when the browser's storage gets deleted or corrupted. The history is also not displayed (though unclear if it's lost or just ...
2
votes
1answer
2k views

Does Google have access to keystrokes on our Android device keyboard? [duplicate]

I am using an end-to-end encrypted messenger on my smartphone. However, today I asked myself if the content of the messages is really secure because of the keyboard on my Android device. As you know, ...
8
votes
3answers
2k views

iMessages in iCloud feature = all unencrypted messages on Apple servers. How secure?

With the presentation of iOS11 Apple introduced a new feature: "iMessages in the cloud". Now they've released iOS 11.3 beta with this feature included. I've read a lot of people are waiting for it, ...
8
votes
1answer
806 views

Security and privacy issues with Telegram

Recently I signed on Telegram using my TextNow number. When I signed in, I was assigned the profile of an existing user! I have access to the profile of this user, including the contact list of the ...
1
vote
0answers
133 views

Are there any good instant messaging applications with a good end-to-end encryption to its web application? [closed]

Whether an app like Telegram is secure or not has already been answered and it has recently been confirmed that it is not. Apps like Signal and Cryptocat have been recommended instead. But do these ...
2
votes
1answer
5k views

How can I delete Telegram messages from their server? [closed]

Since I heard that Telegram stores all the chats including messages, pictures, audio & video material on their servers (cloud) I would like to know how can I delete all of my chats from my phone ...
2
votes
1answer
2k views

How to implement end to end encryption in multi platform messengers [closed]

AFAIK, end to end encryption (E2EE) initiates on one device (one platform e.g. android), message reaches the destination and decrypts there. So other devices of mine (like iOS or web client) don't ...
10
votes
1answer
820 views

Implications of prominent *secure messaging apps* requiring phone number identifiers

More specifically and also generally than this related question, I'm curious about the privacy implications of prominent secure messaging apps (marketing themselves as protecting users' privacy) ...
1
vote
0answers
207 views

Are my SMS messages being intercepted? Or is this some kind of issue with the app itself?

When getting verification codes, I've been getting weird messages, such as: YoUR siGnaL veRiFICATioN c(O(D(E(: ***-*** YOUR SIgNal VERiFICAtION c)O)D)E): ***-*** yoUR siGnaL veRificATiON ...
1
vote
0answers
612 views

Is Line secure? [closed]

I heard that Line social network store all the messages in their servers, but there exist another social networks that doesn't store any messages in any server. Are the servers that store all our ...
2
votes
4answers
254 views

Can WhatsApp see whom I'm messaging?

I realize WhatsApp has end-to-end encryption. But, can WhatsApp see certain metadata, such as the following? With whom I send & receive messages How many messages I send & receive When I ...
4
votes
3answers
1k views

Signal: Secure way to transfer images out of encrypted chat?

This is about saving images sent through the Signal messaging app. I'm using latest iOS, but answers for Android users also welcome. I have images created and sent via encrypted chat. I will put ...
24
votes
1answer
7k views

More secure to use e.g. Whatsapp Web in Franz than in browser? [closed]

Yesterday I found out this application called Franz. Their policy says they don't collect any information about your chats and can't read them (because it's just an application who bundles them all ...
1
vote
0answers
2k views

How secure is Tox really?

I'm wondering. I've found it online and it looks promising and good. I wonder how secure Tox is in terms of anonymity and encryption. Is there any information about privacy issues such IP leaks etc.?
1
vote
0answers
173 views

Facebook messenger app on android device. Is video calling secured with TLS?

On the Facebook messenger app, is video calling on adroid secured by TLS/ SSL encrytion? What is the probability of it being intercepted or sniffed?
1
vote
3answers
3k views

Leaked videos on pornsites

If instant messaging such as skype, messenger,imo etc are safe to use, then why are there leaked video calls posted on pornsites and youtube?
0
votes
2answers
18k views

How private is FB messenger video calling?

Are video calls placed through FB messenger really private or safe? What is the probability that it could be sniffed or intercepted by hackers? Is Facebook recording the data or just meta data of the ...
2
votes
1answer
2k views

Spoofing the identity of another user in Telegram

In telegram you can setup a unique public username which is available to anyone in the search option, but if you choose not to do that, the only way someone can identify you is by the name you set (ex....
2
votes
2answers
5k views

Does WhatsApp have a golden key to decrypt messages?

The head of Information and Communication Technologies Authority of Turkey said this on Twitter yesterday: WhatsApp can read your end to end encrypted messages when necessary. It can decrypt your ...
9
votes
1answer
12k views

Is the Wire messaging app secure? [closed]

The Wire app appears, on the surface, to avoid many of the pitfalls that other messaging apps have - it's fully end-to-end encrypted, and it's open source. It supports video calling, and it has ...
5
votes
1answer
4k views

Private key storage for end2end encrypted messaging

I am familiar with asymmetrical encryption, private/public keys... I am wondering about the "new" trend coming from WhatsApp, Facebook, ... to have end to end message encryption. From my ...
9
votes
2answers
1k views

Does perfect forward secrecy work with group chats or chat history?

I'm curious if perfect forward secrecy could work in an app like WhatsApp where you want to see messages from before the last message or a multitude of messages at the same time like in a group chat. ...
2
votes
0answers
235 views

End to end encryption and OTR on Gajim [closed]

In Gajim, does OTR and end to end encryption work together? Or is OTR turned off if I start end to end encryption?
1
vote
1answer
279 views

Security of Signal download records

What about the security of names of people who download the secure messaging apps Signal? Is there some master list that Signal keeps of every subscriber, that they could be forced to share, or could ...
2
votes
2answers
2k views

Is mattermost encryption for group messaging and file transfer secure?

Mattermost is an open source group messaging and file transfer service, designed as an alternative to Slack. Their account of their security setup is detailed here. Are the encryption options it ...
0
votes
1answer
324 views

Is ClearChat end-to-end encryption and user authentication secure?

ClearChat is marketing itself as a secure alternative to messaging and collaborative work services like Slack, for use by businesses. Their security marketing (e.g. https://clearchat.com/compare) is ...
24
votes
2answers
6k views

Is Signal still more secure than WhatsApp?

WhatsApp has "recently" deployed end-to-end encryption using the Signal protocol, which is of course also being used by Signal itself. The related white paper (PDF). Now this raises the question: Is ...
16
votes
4answers
4k views

How does Ring.cx really work, and how secure is it?

Ring.cx calls itself "ultimate privacy and control for your voice, video and chat communications". But forums online mentioned in passing (little depth) that it uses bad cryptography protocols and has ...
2
votes
1answer
830 views

Is Telegram now secure enough to consider? [duplicate]

Though there have been similar questions left stagnant over the years, this seems relevant with news of WhatsApp privacy policy changes. Has Telegram made serious improvements to issues like ...
2
votes
3answers
86 views

Stopping Spammers From Using My Website's Messaging

I own a website. The website connects between people providing a service ("servicers") and people interested in receiving that service ("servicees"). A servicee performs a search on the site and ...
1
vote
0answers
102 views

Solution for well-encrypted group messaging, on Android inside Knox [closed]

I am looking to setup a secure messaging system to be used among friends. Ideally it would be cross-platform (Android-phones using the Knox-container, laptops, Android-tablets with Knox) and support ...
0
votes
1answer
435 views

Are Multi device usage and bots in Telegram an excuse for only ssl encrytion?

Telegram's E2E encryption is not secure. See: Is Telegram E2E Still Insecure? and Is Telegram secure? Lets asume its is secure and talk about the "excuses" why E2E encryption is not always used. It ...
4
votes
1answer
122 views

Why are end-to-end encrypted messaging systems limited to one device per user?

I am wondering if it's a theoretical limitation that all messaging services I use support end-to-end encryption only for one device per user or more accurately only between two devices. Since all of ...
7
votes
1answer
2k views

Is Telegram E2E Still Insecure?

This was already asked here, but I have questions about the answer. https://security.stackexchange.com/a/49802/118071 I'm not sure if that answer applies to the full E2E mode. Another answer states: ...
5
votes
1answer
16k views

How secure is Slack for sensitive information compared to other alternatives like Mattermost? [duplicate]

Our company is contemplating the benefits of switching from Slack to Mattermost. One of the arguments is that the 'sensitive information should be more secure because it is stored on our servers'. ...
6
votes
3answers
592 views

Why is DARPA interested in secure messaging platform using blockchain technology?

DARPA (US Defense Advanced Research Projects Agency) has released a Request for Proposal for a Secure Messaging Platform using a blockchain framework. The following is the Objective paragraph from ...
1
vote
1answer
814 views

Is SSL not enough for a secure chat?

I was going through SSL/TLS article on wikipedia. It turns out that it provides key setup, encryption as well as authentication. The question is "isn't this enough to make a secure messaging/chat ...
3
votes
1answer
603 views

Telegram Visibility Into Secret Chat VS Plaintext

Background Telegram Messenger offers an "End-to-End" encrypted channel, with their home brewed MTProto, called Secret Chat. They have "Link Previews" by default in all modes, but Secret Chats, in ...
24
votes
2answers
11k views

Which protocols exist for end-to-end encrypted group chat?

I am looking for existing protocols for a group chat with two things: End to end encrypted. Just what you would expect: messages are only decipherable by the chat members and message tampering is ...