DO NOT USE closed source apps for sensitive communications!!!
In that region that can literally mean suicide for people using that app. Please at least use open source apps with end-to-end encryption like Briar (decentralized and can work via Bluetooth and WiFi, closest resembling FireChat) or a client based on the Matrix protocol like Riot.im (which you should use instead of Discord FFS!), or Wire (which works like Signal but does not depend on the phone number)
Please, don't go around spreading dangerous infosec advice. You might be playing with lives here!
I am. Buyers beware: - Steam voice chat doesn't work - The microphone (and webcam) do not function in the Steam Web browser, so you can't use services like Wire Web to get around the broken Steam voice chat problem, you have to go to desktop mode to talk to people. - Although I haven't tried it myself, Flatpak's shortcuts supposedly can't be used from within Steam BPM - So far, no one has been able to figure out how to get GOG games (or anything else using the same installer, such as DRM-free games from Humble Bundle) installed in such a way that they can be launched from within Steam BPM - To install some of the most trivial software available for Debian or Ubuntu downloaded as deb files from the Internet, you have to manually edit a text file in desktop mode to enable the Debian repo, and it is not clear if this will someday have negative consequences since this configuration is unofficial/unsupported - Switching from desktop mode to Steam BPM is unreliable - sometimes it will become unresponsive to input so you have to do hard-reset - Unlike in Ubuntu, some games will have broken audio out of the box requiring hacky workarounds - Sometimes the system will refuse to shutdown and just run forever showing the SteamOS logo, forcing you to hard-shutdown - You can't use the Steam Controller to type anything in desktop mode. Yes, on the Steam Machine with a Steam Controller, you have to plugin an external keyboard!
On the plus side, the update system is very nice. I am surviving with it by using Discord for voice chat (it is one of the few debs I downloaded that actually installed properly). Surprisingly, if you start a voice call in desktop mode, and then switch to Steam BPM, after a few seconds you will both be able to hear each other -- even though desktop and Steam BPM are two different users running in two different X contexts.
Even if we assume that secure chats are reallysecure (which, as you point out, has been debated by many experts), the biggest problem with Telegram is that nobody I've come across uses them because they don't sync between devices. This is very crippling in this day and age. Wire handles that smoothly and Signal requires a strange Chrome plugin solution.
Matrix should be the obvious secure federated replacement for all of these softwares.
Before today I've never heard of Telegram (was reading a Google Allo post where everyone was raving on about it 'cause Google Allo sucks')...
Though if you're looking for a proper Skype alternative, maybe 'Wire' is something to look into? Made by one of the founders of Skype (and has end-to-end encryption).
On a side note, is Telegram really that good? In my friend circle everyone just uses whatsapp and Skype mainly...
If you want something fairly simple to use and private I would suggest Wire. It's basically like Skype but end to end encrypted and open sourced. If you make your account on their web page you don't need to provide a phone number (unless they changed that). You can use it on phone(Android and IOS), browser or a desktop app (Linux, Mac, Win).
EDIT: Missed the p2p part. Maybe Tox could be of interest. Although I havent checked that project out in a long time. https://www.reddit.com/r/projecttox/
People have recommended telegram and signal, but I think Wire is a great alternative.
I really like https://wire.com/ It‘s very secure and has some nice and funny additional features (like gifs, or changing your voicemessages to a robotic sound) Also it has the best voice calling quality I tried (with my friend on your pcs while gaming)
It costs about 4€ per month - which means that they can finance. But some people don‘t wanna spend money if they can use other software for free.
Telegram is currently not recommended by PrivacytoolsIO, partly because their encryption is not secure, and partly because their service is not as private by default as their marketing would suggest.
Even though they collect about as much metadata as Telegram, I suggest looking into Wire as an alternative. It's a lot safer for non-experts to use, because everything is end-to-end encrypted by default. It has a nice UI and most of the features that you just listed for Telegram.
And this is why I have Wire as a secondary program to Discord.
Looking back at it, I'm now happy I did that; and not just because Wire has End-2-End Encryption and Discord does not. But also because the people who develop Wire don't give a damn about Politics and don't take sides to try and censor one side of them out.
People keep saying. "Oh, they'll ban the ANTIFA, BlackLivesMatter, and CP Discords too! Just report them!"
BULLSHIT
I've reported multiple discords servers of ANTIFA earlier this year, and absolutely nothing was done about them. I'll even report them AGAIN if I have to, but I highly doubt anything will come of it. At first I just thought it was slow tech support responses, but now I'm starting to think otherwise with this new revelation here.
Bottom Line:
Discord Team, I am VERY Disappointed in you.
If you think I'm wrong, then by all means, Prove Me Wrong and start banning the LEFT-WING Extremist Discord Servers & Accounts as well, and not just Right-Wing Extremists. You either ban extremists from both sides, or don't ban anyone at all. PICK ONE. You motherfuckers can't have it both ways.
Apparently it is open source
https://wire.com/privacy/ > Wire uses open-source cryptography to encrypt all content. We made the source code for data handling available to the public under the GPL License. This means that anybody can review the source code.
/u/badwithinternet, well caught ... > How can they use your chat conversations if they are encrypted? I was lead to believe this was E2E encryption and they could not see our conversations.
At https://wire.com/privacy/ they claim > Your data is your data — Wire has no access to it.
Then at https://wire.com/legal/#privacy , from which you quoted, we also have
> 2.3 Shared information you post in chats. Using the Service to communicate by chat, our servers store the content of your chat conversation and log other information such as the time and date of your conversations, and the other user or users with whom you are communicating. When using the Service to make or receive calls, our servers log and collect time and date of your calls, and the other user or users with whom you are communicating. We do not collect and store content of the calls. [Emphasis]
With such a blatantly contradictory policy, their stated reason for being is privacy and yet they are explicit that for some channels of communication they'll store the conversation and store metadata, one can only distrust the organisation.
TL:DR; Wire has frontdoors. Wire is not a privacy platform, despite appearing to be on the front page, and you should not use it.
Me and a group of friends that have chatted on our own Haskell IRC server since 2010 recently started trying out Wire https://wire.com/ which is similar to Slack but is open source, written in Haskell https://github.com/wireapp And has end-to-end encryption https://medium.com/@wireapp/making-your-conversations-secure-dab207ab77fd
The web client isn't as feature full as Slack but it's as convenient. There is a mobile and desktop app. And being written in Haskell is always a bonus.
This is amazing! Thank you! But you missed Wire. It's my personal favorite for chatting, but it's also great for calls in my (limited) experience.
See also its rating at https://www.securemessagingapps.com/
Don't do it on skype, that's a bit of a disservice and a pain to do on linux in itself. Depending on who you want to work with try, meet.jit.si or other platforms like wire (zoom is a proprietary one that works)
Consider using tmate (you can config your own docker instance and then config the tmate binary to use that server for security) with a server of your own so you can share terminals - it's really a wrapper and addendum to tmux that allows for easy access. I wouldn't consider it very secure, especially when using the public server, but it is useful for this sort of thing.
edit: convert meet.jit.si into a url
I use Wire daily for over 20 different contacts. It has literally become my messaging app of choice for many reasons. The primary one being that it is being undeniably run by people with a solid head on their shoulders looking to advance the privacy community. I asked about a feature via email a month ago, the representative said "I think that is a great idea. Thanks." It was released in the updated last week.
I honestly don't have any issues with Wire. It is packed with great features, was open-sourced completely this summer, provides a very in-depth analysis of the privacy and security the app strives to protect for the users at https://wire.com/privacy, and they don't seem to be hiding any sort of agenda from us. You ask a question, you get a straight forward answer that isn't iced up with sugar to appeal to you.
I will continue to use and promote it, just like I did with Wickr for 3 years straight, until a better solution comes out or the company behind Wire decides to go rogue and throw in a backdoor.
Seb //
Honourable mentions to companies I've worked with that are using Haskell extensively:
Give Wire a try. It's basically the modern, end-to-end-encrypted spiritual successor to Hangouts and Skype.
And I'm sure that some people will reply with "But Wire doesn't have much of a user base, so it's useless!" Well... neither does Allo.
We at Wire are hiring Haskellers and we especially need people with some devops background so you seem like a good fit!
We're located in Berlin and we're making an end-to-end encrypted messenger (like Signal, but we specifically try to push secure messaging to big businesses). Our backend is written in Haskell and everything we do is open-source.
I wrote a post about what it's like to work here: Medium.
NB: since this vacation got published to Reddit (a couple weeks ago) we've got quite a bit more responses than we expected, so please be patient if you don't hear back from us immediately :(
https://wire.com/en/ if you install it on your computer you are given the option to make an account with email or phone number but if you install it on phone before making an account you only hav an option to make it with phone number
>uno dei pochissimi social network che fa end to end encryption di tutti i messaggi di chat
Se intendi dire uno dei pochissimi con una rilevante fetta di utenza, son d'accordo, altrimenti non sono poi così pochi.
Ad esempio per quanto riguarda la messaggistica istantanea io sto usando Wire in questo periodo per chattare con una persona, lì è tutto cifrato e2e. Riot permette ugualmente di cifrare e2e anche se per ora è in beta, però penso che a questo punto si sbrigheranno visto che l'altro giorno sono stati hackerati e il tizio ha potuto farsi una passeggiata tra le chat.
Altri sono Signal (che ha venduto il protocollo a WA stessa), Threema (questo è commerciale), Ring (che ora si chiama Jami) e sicuramente c'è qualche altro servizio di questo tipo.
Mettiamoci anche il fatto che WA ti chiede di salvare le conversazioni sul cloud di Google, che praticamente invalida qualsiasi pretesa di e2e encryption...
Insomma, WA di concorrenti sulla qualità ne avrebbe anche, non possono minimamente considerarsi concorrenti confrontabili a livello di utenza.
See Wire. It’s open source, always end-to-end encrypted, available on Windows, Mac, Web, iOS, Android, and Linux, supports desktop screen sharing, has been independently audited for security, and supports instant messaging, voice and video calls, and file sharing. Both a free tier and paid business tier are available.
No mention of Wire? There is a personal use version that is free. I use it for a lot of my video calls, managed to get a lot of friends to switch from Skype to it. Because I told them I refuse to use Skype.
I've tested Riot, Conversations and Wire.
Personally, I recommend Wire, I'm using it every other day and it just works (they got nice apps too). Conversations is nice, but drains battery (lacks GCM support on Android for example, AFAIK no desktop client, so you need another here), and Riot still has a lot of issues, including the end to end encryption, which should be a hard requirement for all current messengers.
Another good keyboard with support for indic languages
https://f-droid.org/packages/org.smc.inputmethod.indic/
Also why is surespot is included when it was last updated in april 2016?
Why is wire is not included in this list?
Wire is a bit more polished than Matrix/Riot and they're planning self-hosting with federation for next year. Just in case Riot isn't polished enough for you. Wire is equally secure and very usable for day-to-day usage which is why, at the moment, I'd recommend it over Riot. Hopefully Riot will find a way to get new funding so they can accelerate development.
Signal is available as a chrome app (not ideal, but it exists)
https://chrome.google.com/webstore/detail/signal-private-messenger/bikioccmkafdpakkkcpdbppfkghcmihk
Wire straight up supports linux and web browsers
https://wire.com/en/
Proton also has a web client
https://protonmail.com/
I'm trying to get my friends to sign up for Wire, but have meet with little success. (I'm in the US.)
It looks like the best of the group from a security and privacy standpoint.
Company: Stash
Type: Full time
Description: We are looking for senior engineers to maintain Open-Transactions and develop products based on this library.
You will join a team responsible for creating products that bring financial disintermediation and autonomy to individuals, as well as solve many classes of problems in online and traditional B2B commerce.
Experience
Required:
Desirable:
Location: Austin, Texas, USA
Remote: No
Visa Sponsorship: No
Technologies: C++17, Linux, Blockchain, ZeroMQ, Qt
Contact: Wire: @hirowhite
You simply go to the website, grab it and sign up inside the application. But since it can run in a browser, you can register directly from the site without downloading the client.
This is from their privacy whitepaper:
>3.2 Metadata
>Wire maintains the following metadata about conversations on the backend servers:
>* Creator: The user who created the conversation.
* Timestamp: The UTC timestamp when the conversation was created.
* Participants list: The list of users who are participants of that conversation and their devices. This information is used by clients to display participants of the group and to perform end-to-end encryption between clients (see Wire Security Whitepaper for further details).
* Conversation name: Every user can name or rename a group conversation. Conversation names are not encrypted.
In other words, Wire stores a list of every person you've ever contacted on their servers in plaintext until you delete your account.
At least one of their competitors manages to provide a decent end-to-end encrypted multi-device and group messaging experience without having to store any of the metadata listed above on their servers. We'll just have to wait and see if Wire will follow their example.
First of all good move for going without a smartphone for so long, but unfortunately that opt out option was only available for a month about a year ago but it only stopped targeted Facebook advertising.
Take a look at the encrypted messenger (Wire) might've the bells and whistles to convince your sister to try it.
If you want someone with a different perspective to talk about it with, Wire is private and you can message me with the same username as here. But I hope in your studies you don't get stuck too much in the school of psychoanalytical theory, where people often place too much emphasis on childhood development being the primary source of all future pathology.
People are sexual, and the expressions of their instincts are often disorganized, especially in early years. The biggest psychological impact these kinds of experiences have, in my opinion, are from the social implications surrounding them in specific cultures. In your situation, each episode seems to have an overblown and potentially damaging reaction from people in positions of higher power than you, whom you're supposed to be able to trust to help sort things into an orderly system. When it comes to sex though, people often panic and have no real understanding of what's going on, so it gets out of control. That is very confusing and stressful, not the sexual acts like someone inspecting your genitalia.
Anyways, if you ever want to express yourself privately, I have a different perspective, where you didn't do anything wrong, but you're not a victim either, and really society just doesn't know how to handle things properly. I imagine a big part of why you went into child psychology is because you felt firsthand the confusing and stressful effects, where part of this journey is about trying to make sense of what became way too hectic in the past. I blame the culture. Sexuality is biological, and we can do better to understand it, where our response isn't hysteria, guilt, and punishment. I wish you luck in sorting that out.
Uses an Axolotl ratchet; similar to Signal at least for the message encryption (haven't checked what the voip/file encryption is). Similar enough that there was some legal drama.
From the security whitepaper at the bottom of https://wire.com/en/privacy/:
> End-to-end encryption (E2EE) takes place between two clients (cf. 2.2). Axolotl [9] is the main cryptographic protocol. It is derived from the Off-the-Record protocol, using a different ratchet[10]. > > Furthermore Wire uses the concept of prekeys [7] to use the protocol in an asynchronous environment. It is not necessary for two parties to be online at the same time to initiate an encrypted conversation. > > The actual Axolotl implementation used in Wire is Proteus [8]. It uses the following cryptographic primitives (provided by libsodium [15]): > > * ChaCha20 stream cipher [16] > * HMAC-SHA256 as MAC [17] > * Elliptic curve Diffie-Hellman key exchange (Curve25519 [18]) > > Key derivation is done using HKDF [19].
Wire does all that and is the most cross platform app that I know of to date to do so, however it is NOT a SMS replacement like Allo is. It was created by members of the team that created Skype before it was purchased by MS.
My only concern with hangouts is that I want them to be totally private between participants. Every time I google about it (haven't recently) I get conflicting information.
I'm tempted to give the new wire (ex skype people) https://wire.com/?hl=en a look though.
This was the statement about it in the article:
> Some users may also be curious about quantum computers, which will be insanely fast and promise to upend existing encryption systems. Elliptic curve cryptography in its current form would not stand a chance against a quantum computer. But such technology is still at least several years away, and just as ProtonMail has adapted to the new ECC standard, we will continue to evolve alongside new challenges. There is active research today into quantum-resistant encryption algorithms which we are following closely.
This is a pretty thin statement, would you not agree? It would be nice to get more specific or definitive ideas or plans on the threat now, even if it's only now considered theoretical. It would make sense for ProtonMail to at least release a statement where they talk about it similarly to the way Wire has done this in their area of cryptography with secure messaging: Wire and Post-Quantum Resistance.
That's the good thing about Wire, you don't have to believe me, or anyone:
Here's their security white paper, and here there's a blog post about this, too: https://wire.com/blog/key-verification-secure-conversations/
I use Wire for some time now. If you mean the features described here: features
all accept one are available for free users. the one missing being the team admin.
hope this helps
Consider Wire. Wire is 100% open source (including servers), end-to-end encrypted by default, available cross platform (iOS, Android, Mac, Windows, Web, Linux), has undergone independent security audits, and supports audio & video calls, instant messaging, and file sharing.
Honorable alternatives are Keybase & Peerio, both open source and have apps for Android & Windows.
Wire works well, it's free, open source (under GPL), and secure (end-to-end encryption). The Linux app is fully-functional and works well.
Riot works well also, but it's Matrix based, you mentioned that you didn't want that in another post.
Minds.com Gab.ai steemit.
I would suggest using a messenger app that doesn't require a phone # and encrypts everything. BlackBerry Messenger and Wire are good options for this.
You should not feel comfortable discussing it in PM then, because Reddit saves those forever. Use Wire to chat with strangers because it's private, and you can delete messages or set them to self-destruct. I'm on there with this username if you or anyone else wants to express anything.
They've somehow managed to omit how much metadata they collect from their privacy policy. They only mention it in their privacy whitepaper. See my comment above for details.
This has inspired me to create a Wire account. Now, I just have to convince my friends to join.
Wire= open source client and server, end to end encryption, independent security audit, multiple OS support.
Hi, this is not new - Wire has always had that and it's been detailed in our privacy whitepaper so those with extreme threat models can make an educated decision.
https://wire.com/resource/Wire%20Privacy%20Whitepaper/download/
As said in the article - this is a tradeoff to offer better experience in a multi-device scenario.
Note that you can sign up with a throwaway email address as can your counterpart so the info is pretty much meaningless.
https://medium.com/@wireapp/staying-anonymous-on-wire-22faa13aba4d
We're also working on open sourcing the server so you can run a private Wire.
Edit: Added link to anonymous usage blog post.
I would recommend Wire instead. The call quality is awesome, they've got clients for everything, including web and Linux, the clients are free software and they've promised to open up the code of their servers too within this first half of 2017. And they're using quality e2e encryption that's passed the scrutiny of a third party audit. Take a look at this comparison. :)
How about the new messenger coming from Germany. It is called Wire uses Signal protocol and works without Play Services. It even has some more features in terms of sharing files, sketches and such. It works out of the box on SailfishOS and BlackBerrys Android Runtimes and yes you can get the APK without using Google Play. iOS App and Windows + Webbrowser App are also available. Code is on Github: https://github.com/wireapp https://wire.com/
Wire is a nice concept but I would not recommend using it until a complete audit is done. I do not like the fact that there store any metadata on their server although it is minimal compared to some programs. There are also some overhead issues because of how they do encryption.
You can read their two whitepapers and decide. Personally I would use Signal which has been proven to be secure but it's been hard getting friends to switch. https://wire.com/privacy/
I personally do not use any for a desktop environment for webcam usage. For messaging I have used Pidgin/Adium in the past but haven't in a few years because everything I want and need is mobile.
I have no recommendation for desktop software for webcam/video conference purposes. However, if I had to make a choice right now and it was the only option I had at the time, I would consider using Wire first. I know it isn't open source, but I feel it would be far better than Skype at the moment.
I've found <em>Wire</em> works consistently well; it's secure and easy to use.
There's next to know tech support for the free version. But it's simple enough to do what it seems you want. Good luck!
Wire wäre vielleicht noch eine Option. Du brauchst keine Nummer hinterlegen wie bei Signal, und auch kein Telefonbuch teilen, außerdem ist es End2End und Opensource. Man kann es kostenfrei für den persönlichen Gebrauch nutzen, lass dich nicht von ihrer Zielgruppen-Sprache irritieren, da sie sich mehr als Business-Messenger sehen. Im App-Store deines Vertrauens kannst du die App einfach runterladen und ein Profil mit Nutzernamen erstellen.
Das UI ist etwas gewöhnungsbedürftig, aber es bietet so ziemlich alles was man braucht.
I actually prefer Wire,
It doesnt require phone number (on desktop), it doesnt even require a smartphone it has clients for all OS passed multiple audits (source) Being programmed in Germany with Servers in Switzerland it is gdpr and dsgvo compliant 100% open source on github e2e encrypted groupchats and videochats, files forward- and backward secrecy free for private use
only downside: still room to improve user experience and UI
what else could one want?
La alternativa a cryptocat es wire.com, pero si solo quieres hablar con un mesenas de onlyfans recomendaria discord desde que no muestra ninguna info más que tu nombre de usuario.
edit typo
> "We became the only solution in the world -- the first solution out there, that is fully end-to-end encrypted. So it means that we not only encrypt for information... but it encrypts it from us having access to the information."
I guess Duo doesn't count? Or [Signal](https://en.m.wikipedia.org/wiki/Signal_(software\))? Or Wire?
I always used it free, using it for free currently on mobile but seeing your post I checked their website : https://wire.com/en/pricing/ and I’m afraid you may be right 🤨🤔 Looking at my mobile app right now everything is working, nothing tells me I have to pay or I’m using a free trial. So not sure what to think.
Because they have had their security examined by independent sources and are backed by people like the EFF.
I'm not sure if you understand how end-to-end encryption works but it's not possible to access messages when you use that unless you use a "man in the middle" which those apps also have preventative measures to prevent.
There is no backdoor with end-to-end encryption. I suggest you read about their security.
I find it interesting that nobody mentioned Wire yet - it's free, open source, has tons of features (including fully encrypted video calls), and at least there seem to be plans for federation. If that will be implemented, it's pretty much the perfect messenger.
Danke.
Für Privatnutzung kostenlos? Das verstecken Sie aber gut in Ihrer Preisliste. Kannst Du irgendetwas zeigen, wo das mit der kostenlosen Privatnutzung steht?
Dann wäre es ja doch eine tolle Alternative zu den Datenmonstern aus USA.
See also Wire which supports iOS, Android, Windows, Mac, Linux, and Web. Wire is 100% open source, always end-to-end encrypted, has undergone independent security audits, and has a beautiful UI.
>(3) Messenger - Signal (most secure), Telegram (only use secret chat as far as possible), Conversations (Xmpp client)
I would not recommend using Telegram. It is marketed as a private messenger, but it's not private by default. It collects all of its users' contact lists and every message, photo, video and document that they send in the default chat mode, and the app's default settings make it possible for anyone who can hijack a user's phone number or intercept their SMS messages to instantly have access to all of that user's cloud based data. Their use of homebrew cryptography is also questionable, so even their optional “secret chat” mode may not be secure. If privacy is important to you, I would recommend using something else. Wire is an excellent alternative. Their front page has a table that lists some differences between Wire and some other popular messengers, including Telegram (Wire compared with... -> Other popular messengers).
I'd check out Wire. You can sign up with an email address or phone number. Additionally the team has written a blog post on how to stay more anonymous when using the service.
Wire has worked really well for me on Android, Linux/Mint and FireOS. I like their focus on privacy - all other things being equal - it sets them apart:
it's one of the few (I don't know of others) that don't even require a telephone number. Also, when running for the first time on Android, it'll even ask your permission to acquire contacts. You can deny them even this.
Video, voice has worked really well for me across devices. Attachments, simple texting, F/X on voice and messages superb. You can even doodle on an image before sending.
The only other encryption-based messenger I had tried before was Telegram and the first thing they did was capture my contacts and display my telegram info to another of my contacts who also had telegram.
There’s an official API though currently in beta. I cannot recommend it myself as I have not used, but it’s open source and end-to-end encrypted. I would imagine that each bot or connected device would generate a private key. You can find more information in https://wire.com/en/developers/.
Wire does exactly what you want. Signup can be be either email or phone#, and afterwards one can choose to add the other if one wants.
I'm always surprised that Wire doesn't get more love. It's basically the modern spiritual successor to Hangouts or Skype; proper multi-device support, native clients for Android/IOS/Linux/OSX/Windows/web, text/audio/video chatting, and default end-to-end encryption using the Signal protocol. (Heck, even the clients and server are open source.)
You can add me on Wire private messenger, same username, and send a text whenever you're thinking about it. But I will probably challenge you to rethink it in unusual ways. I don't know if it'd help, but I suppose could help you get unstuck.
Yeah, you're definitely a psycho. If you get Wire add me with my username. I'm not your counterpart, but you can say whatever crazy things you want until you figure out how to break out of this isolation.
You sound kind of crazy. If you get Wire you can add me, same username. You can ramble whatever for whatever reason, and I can reply for a while however you want. Then you can stop when you feel better, because I have zero interest in meeting people off here, or even writing much about myself. Anyone else reading this can add me too.
People should try Wire instead of Skype. It actually has the same co-founder as Skype before it was sold to Microsoft. I have the same username on there as here if you or anyone else wants to add for text messaging.
There's currently no way to do that. Wire's privacy whitepaper says:
>Wire maintains the following metadata about conversations on the backend servers:
>* Creator: The user who created the conversation.
* Timestamp: The UTC timestamp when the conversation was created.
* Participants list: The list of users who are participants of that conversation and their devices. This information is used by clients to display participants of the group and to perform end-to-end encryption between clients (see Wire Security Whitepaper for further details).
* Conversation name: Every user can name or rename a group conversation. Conversation names are not encrypted.
In other words, Wire is designed to store a list of every person you've ever contacted on their servers in plaintext until you delete your account. They've said that the Wire servers do this in order to provide a better multi-device and group messaging experience.
Signal manages to provide a decent end-to-end encrypted multi-device and group messaging experience without having to store any of the metadata listed above on their servers. We'll just have to wait and see if Wire will follow their example.
It does seem like SMS is the only high use messenger here in the States. Haven't been able to convince my friends to use Wire which looks like the best for security and privacy.
privacytools.io has a section on encrypted video & voice messengers you may find useful. I like Wire for text messages (they support video and voice, but I've tried neither). They have a desktop application for Linux, as well as Windows and OS X, obviously.
The application has a clean modern aesthetic with Giphy integration, top notch audio quality, and the ability to use disappearing messages. basically does everything.
You can sign up with just an email address on a iPad/tablet, PC or Mac and than after sign in using your phone app with that same email address so you don't need to use your cellular number, or even give them access your contacts.
Take a look here https://wire.com/en/ you can thank me afterward :)
>Is it until deletion tho or for the 72 hour period?
The 72 hour period you are referring to only concerns messaging logs. Most people misunderstand this as meaning all metadata, which it doesn't even come close to: "Wire CEO and co-founder Alan Duric confirmed to Motherboard in an email that this list of people users have communicated with is kept until a user deletes their account."
>Also, what is the alternative to storing usernames? Hashed usernames? Encrypted usernames?
The solution is to implement group and multi-device messaging in a way that the servers don't need to store lists of who users communicate with.
Check out Wire: cross platform with end-to-end encryption. If you sign up online, it doesn't require a phone #. If you try to sign up via the app, it defaults to linking your phone #, at least on a phone anyways. It's got fun drawing and voice features your kids might enjoy as well. It's not my personal choice of messenger, but it seems to fit your needs perfectly.
Pessoalmente acho o Wire (https://wire.com) a melhor app em termos de funcionalidade/segurança/privacidade, mas no caso específico do Whatsapp acho que esta noticia acaba por exagerar.
Whatsapp apesar de tudo tem um dos melhores protocolos de encriptação e nas definições dá para alterar este comportamento. Acaba por ser mais "gravoso" em termos de privacidade os backups automáticos para o Google Drive e iCloud sem encriptação ou o Facebook guardar todos os metadados.
Wire. Native open-source OSX, Linux, Windows, IOS, Android clients. End-to-end encryption for text/voice/video, multiple devices simultaneously. And no need to give it a phone number, you can sign up with just an email address.
It's actually made by former Skype devs. It's basically what you get if you set out to make a modern program that does what Skype does, without the legacy security problems, and with modern encryption.
Have you considered Wire? It hits pretty much all the bullet points you listed. You can sign up with just an email address, and you never need to give it a phone number. It's got native open-source clients for Linux, OSX, Windows, IOS and Android (and it doesn't discriminate against tablet users). The encryption is based on the Signal protocol. It does chat/voice/video, all end-to-end encrypted by default. The Android app can even be downloaded right from the website, making it useful for Cyanogenmod users who avoid installing Google apps. It's also quite visually polished. It's a nice UI.
The one drawback is that the server is still closed-source. Wire's developers have made some comments about open-sourcing the server, as they've already done with the clients, but they've set no firm dates yet.
https://wire.com is the most promising one I've come across so far, it has seamless video call support across a shit ton of different possible platforms and their customer support was pretty groovy regarding my weird bug that didn't let me call anyone.
I had the link posted but it was rejected and I couldn't find a way to edit it then repost so I made another post and it error'd saying you can't post the same link within 7 days- Maybe I missed how to edit a post.
If you go to MysteryWire.com it's there
Did you create a persistent volume? Open the "Configure persistent volumes" app and enable dotfiles
Go to https://wire.com/en/download/ and get the appimage for Linux
Go to your persistent folder, and make a folder called Wire and then another folder in that folder called Wire.AppImage to put the image in
Create two empty folders next to it, and name them Wire.AppImage.config
and Wire.AppImage.home. This ensures that your conversations are saved in your Persistent folder, and you don't have to login each time again.
Create a file called Wire.desktop with the following :
[Desktop Entry] Encoding=UTF-8 Name=Wire Exec='/home/amnesia/Persistent/Wire/Wire.AppImage' --proxy-server="socks5://localhost:9050" Type=Application Categories=Network
Finally open the "Terminal" app and run the following:
mkdir -p "/live/persistence/TailsData_unlocked/dotfiles/.local/share/applications" cp "/home/amnesia/Persistent/Wire/Wire.desktop" "/live/persistence/TailsData_unlocked/dotfiles/.local/share/applications"
I am using Wire which was btw recommended by Edward Snowden. It's end-to-end encrypted and its security is second to none. It's not so clear from their website, but it can be used for free for private conversations: https://wire.com/en/products/personal-secure-messenger/
If it's someone that I have political/sensitive discussions with, I usually use Wire (direct link because they don't have their personal version on their website anymore, they're mostly focusing on corporate accounts now). Signal is also good too if the person is already using that, but I like Wire more in general.
If we're not going to be discussing political topics, FB Messenger, Instagram, iMessage since most people are on those.
We work on an end-to-end encrypted messenger. In general, I think you may look around messaging apps. They get more complex and tricky, espiecially now when we're on in lockdown. Rust for cryptography, some new ideas and low-level tech for audio/video, experiments in how to have a cross-platform app, because often a messenger has to work for Android & iOS & Web... Fun stuff. Also, a lot of mess.
both have free options, but they are buried very deeply on the site - can you draw your own conclusions?
And only these two projects have such a very similar design not only the application but even the site and monetization policy - but no one writes anywhere about their relationship...
How weird is that?
ROFL
Basically, the only reason I use Kik, is because that's what everyone uses. It's probably my least favorite messaging app. My personal favorite is Wire. It is available for iOS, Android, Windows, macOS, Linux, and web browsers. The nice thing about it, you can switch between devices or logout, and not lose the conversations. You can also do voice chat and video chat, all protected by a secure end-to-end-encryption. All you need to signup is an email address, so it's totally anonymous.
Hi - I work for Sammons Financial Group and this is definitely a scam. We don't use Wire.com to hire or pay people. Have seen a couple of notes come through from HR that it's a scam and they are even posing as an actual employee (whose information the scammers copied from LinkedIn).
Any legit applications for employment at Sammons Financial Group would have to be done through our website.
Hope this helps!
I'll take a peek through that thread, thanks for the link. It seems reasonable to me that Axolotl should work, just needs some tidying up for the PinePhone, so I think that's where I'm going to continue for now. I don't really understand what Axolotl is though - how come Open Whisper Systems is ok with it existing/talking to official servers? Maybe I misunderstood some of what I read, and clients are tolerated?
> wire seemed like an interesting alternative
This https://wire.com/en/? I don't think I was aware of that - I'll take a quick look.
I have only been exposed to Matrix by clicking links that launch me to browser pages that have <something> where I click the default actions. Maybe I should look closer at that - it seems like it's exactly what Signal was worried about (federation = inability to adapt), so I'm curious to see how it pans out long term.
"Build an Electron app", they said, "it's basically cross platform for free"...
Here is the best visibility I've seen from any company out there about video conferencing problems that are industry wide ones:
First, all privacy measures are security measures but not all security measures are privacy ones. Wire learned this the hard way.
https://wire.com/en/blog/video-conferencing-security/
Second, problems with voice layers of video-conferencing solutions have always been garbage.
https://www.pcmag.com/news/voips-big-security-problem-its-sip
Third, there are only a few companies in this industry actually willing to design their business model around security instead of just adding it in to ease the minds of their shareholders and customers.
This may not be my specific wheelhouse but there is enough publicly available information that anyone with two seconds and an internet connection can piece these problems together. Sorry for the lengthy responses.
No.
<em>Wire</em> is a great, secure multimedia messaging/collaboration app with an excellent array of user features, and its company policy rejects the sharing of customer data with law enforcement groups.
I second the mention of Signal as well.
I'd recommend adding Wire to that list. Fully open source frontend and backend, and always end to end encrypted. Mostly for group chat, but also does audio and video. Made by the original team that build Skype, but with a modern architecture focused on a privacy.
I'm in some wire groups with hundreds of participants, and the e2e works great. https://wire.com/en/
False, please read the link that I reported (item 15).
If you are using the Service in any country within the European Union or otherwise outside of the United States the following applies: The laws applicable to the interpretation of these Terms of Service shall be the laws of Switzerland, without regard to any conflicts of law provisions.
If you are using the Service in the United States the following applies: These Terms of Service will be is governed by, and will be construed under, the laws of the United States of America and the laws of the State of California, without regard to choice of law principles.
my buddy recently migrated his Rocket Chat server to MatterMost. I've enjoyed it quite a bit more than Rocket Chat. Note: Mattermost is self-hosted, like RC. I don't know what its E2E encryption options are; I'm only an end user, I don't admin the server. But the user experience is nice.
Also, I've found Wire to be decent, though I never did achieve sufficient network effect for it to be useful in my life.
Wire is perfectly fine for privacy. It's E2EE, open source, and has been audited multiple times.
The reason people claim it's not privacy focused is because it collects a small amount of metadata. If your threat model is less than being targeted by government agencies, I don't believe there's anything to be concerned about. Even if the government tries to go after your Wire records, they're based in Switzerland and they don't have any of your content anyway due to E2EE. If you're looking for full blown anonymity, then yes, don't use Wire.
> 3.2 Metadata
> Wire maintains the following metadata about conversations on the backend > servers:
> * Creator: The user who created the conversation. > > * Timestamp: The UTC timestamp when the conversation was created.
> * Participants list: The list of users who are participants of that convesation and their devices. This information is used by clients to display participants of the group and to perform end-to-end encryption between clients (see Wire Security Whitepaper for further details).
> * Conversation name: Every user can name or rename a group conversation.
Remember that r/privacy is an enthusiast haven and often talks in black and white. Wire is absolutely fine for the overwhelming majority of people.