Hacker News Reader

Parent Full thread

rPlayer6554

They have reproducible builds on Android if you are that paranoid.

View on HN

That doesn't help because the other end can be compromised.

well nothing you can do can stop the other person from leaking your conversations.

That's a different issue. We're talking about software not "opsec."

When the military issues secure communications devices, it makes damn sure that BOTH SIDES have a secure device.

If they verify their end, it does.

What software would not be vulnerable to what you’re describing?

It's not about the software, it's about the distribution of the software. Signal distributes through Google as man-in-the-middle. So if you trust Google, you're OK. But if you're using Signal because you don't trust Google, it doesn't make sense.

In case you don't trust Google I really suggest OpenSSH or WireGuard, to establish a secure tunnel; and then run IRC, Jabber, SIP, or mumble (as needed) over the tunnel.

Reply on news.ycombinator.com