Re: Wickr vs stef's seven rules of thumb to detect snakeoil

2 Feb 2015


      Dnia niedziela, 1 lutego 2015 22:03:13 Seth pisze:
...
Main flaws claimed to be found by reviewer:
Password stored on servers
hardware binding is a joke
caught using static AES key
Were not signing their messages
TOFU (Trust On First Use) architecture
Crappy TLS implementation
Wickr servers using PHP scripts
I'd say the verdict leans towards snake-oil so far.
"Leans"?..

-- 
Pozdrawiam,
Michał "rysiek" Woźniak

Zmieniam klucz GPG :: http://rys.io/pl/147
GPG Key Transition :: http://rys.io/en/147