... minus the libraries in native code which also are considerably harder to rev... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pilif on Jan 13, 2017 | parent | context | favorite | on: WhatsApp backdoor allows snooping on encrypted mes...

... minus the libraries in native code which also are considerably harder to reverse-engineer than the java parts.

Also, unless you're suspicious and actually check, you could be served a special version by the App Store that was compiled only for you and contains the required add-a-key-but-dont-show-a-popup feature.

I'm not saying that Signal and/or Google are shipping a backdoor. I'm saying that we have to trust them that they don't.

whyever on Jan 13, 2017 [–]

Of course, if the software or hardware on your phone is compromised, all is lost. This is not specific to Signal though.

> I'm saying that we have to trust them that they don't.

This applies to anything. It is not feasible to build and/or check all software and hardware by yourself.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact