Slashdot Mirror


Five Alternatives To Snapchat

Nerval's Lobster writes "Snapchat isn't having the best 2014: less than a week after a cyber-security collective revealed an exploit that could allow hackers to swipe users' personal data from the messaging service, a couple hackers reportedly went right ahead and stole 4.6 million usernames and phone numbers, posting them as a downloadable database. It's easy to see why Snapchat's become so popular: the idea of messages that vaporize within a few seconds of opening holds a lot of appeal to not only the excessively paranoid, but also anyone who simply wants to keep their online footprint to a minimum. But as several security experts are pointing out, the idea of 'disappearing messages' was never a foolproof one. 'If you took a photo of your phone while the risky image was on screen, or took a screenshot, or dumped your phone's graphics RAM, or used basic forensic data recovery techniques to retrieve the "deleted" files after viewing them, or fetched the image through a session-logging web proxy,' Phil Ducklin wrote in a Jan. 1 posting on the Naked Security Website, 'then you'd quickly have realised that Snapchat's promises of "disappearing images" were fanciful.' For those who no longer trust Snapchat, but want that same vaporizing-message functionality, some alternatives exist, including Silent Circle (which offers a messaging app, for a subscription fee, that forces messages to self-destruct after a set period of time) and Wickr (features military-grade encryption — AES256, ECDH521, RSA4096, TLS — and the app-builders claim they don't have the keys to decrypt; messages vaporize after a set time)."

14 of 94 comments (clear)

  1. I wonder if this will affect their valuation by QilessQi · · Score: 4, Funny

    Perhaps they should have taken the $3B offer from Facebook (or the alleged $4B from Google) when they had the chance. Especially since people have endless opportunities to abandon services like Snapchat for the Next Cool Thing anyway.

     

  2. vaporize? by trybywrench · · Score: 2

    So does your phone steadily run out of RAM as the chips are incinerated? ...I didn't know the batteries were that powerful either, I'm so far behind the times.

    --
    I came to the datacenter drunk with a fake ID, don't you want to be just like me?
  3. I can't see much use for them.. by 3.5+stripes · · Score: 3, Funny

    then again, I don't have a body that too many people are interested in seeing in a state of undress, or a burning desire to show it to other people.

    --


    He tried to kill me with a forklift!
  4. Re:What about... pgp/gpg? by N1AK · · Score: 2

    All well and good, however from what I've seen so far 99.9% of the issue with things on snap chat being shared beyond the senders intent are where the recipient saves a copy. If you present the data to a user un-encoded at any point, barring you being able to restrict the device they are using (and even then if they have a camera), then they will still be able to do that.

  5. DRM by flyingfsck · · Score: 2

    Snapchat and it's ilk is a kind of DRM. As such it will never really work.

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!
  6. "Military-Grade" Encryption by Anonymous Coward · · Score: 2, Informative

    Please stop saying this, it just sounds stupid.

  7. Disappearing data can't work by swillden · · Score: 3, Insightful

    The summary presents Silent Circle's subscription service as an alternative that accomplishes what Snapchat doesn't, but that's crap. Nearly all of the listed ways of preserving Snapchat messages will work with Silent Circle... and anything else that tries to do the same thing. Oh, I have no doubt that the Silent Circle app is a lot better at protecting your data in transit, and I'm sure it reduces message access to key access, so once you can verify that the keys are gone, the contents are effectively gone, but those keys are still vulnerable to all sorts of device hacks. They have to be.

    I have hopes that in the future we may be able to embed secure key management hardware in devices, which will make this kind of stuff a lot harder to defeat, but ultimately nothing will ever be able to make sure that digital data actually goes away. DRM -- which is what this is, just in a slightly different form and for a different purpose -- doesn't work, and can never work, not in an absolute sense.

    This isn't to say that Snapchat's disappearing messages aren't good enough for many purposes, and that Silent Circle's implementation isn't adequate for even more (assuming the people you want to talk to also have it), but anyone who thinks that they can send digital photos of their genitals to their friends, confident that only the recipient will ever see them, is simply mistaken. And anyone who wants to use ephemeral messaging for any more important purpose is a fool.

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    1. Re:Disappearing data can't work by swillden · · Score: 2

      I have hopes that in the future we may be able to embed secure key management hardware in devices, which will make this kind of stuff a lot harder to defeat, but ultimately nothing will ever be able to make sure that digital data actually goes away. DRM -- which is what this is, just in a slightly different form and for a different purpose -- doesn't work, and can never work, not in an absolute sense.

      Given the latter, why have hope for the former?

      Because "can't work in an absolute sense" isn't the same as "isn't useful". And having stronger key management will extend the range of utility by reducing the avenues of attack and increasing the scope of threat models under which it's secure.

      Of course, this still leaves open the problem of how to get people to understand the practical limits of the technology.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  8. the app-builders claim they don't have the keys... by fustakrakich · · Score: 2

    Yeah yeah, pull the other one. A quick national security letter telling them to log everything will take care of that issue, and who's gonna know? We will never have privacy. The only solution is to make sure the authorities don't have any either.

    --
    “He’s not deformed, he’s just drunk!”
  9. Taking a picture of your phone by kruach+aum · · Score: 3, Insightful

    None of the alternatives, no matter how technologically sophisticated (within the bounds of current smartphone technology) can protect against a picture of the screen being taken with a second device.

    1. Re:Taking a picture of your phone by Kjella · · Score: 2

      Exactly, it's still trivially easy but it's more about intent and premeditation. It's more like the logic of a cooldown period for gun purchase, you shouldn't be able to go directly from getting fired down to the gun store, buy a gun and go postal. Same way you can't go nuts with SnapChat pictures you never saved and if you did it proves you planned to keep those pictures against your partner's will and you went to great lengths to be deceptive about it - there is really no other reason to avoid the standard screenshot which will notify the sender. So many will be unable to leak the photos, the rest will be punished harder because they've prepared to share the photos.

      Also, people are lazy. If I want to send someone a photo and delete it after they've seen it (in case the phone gets lost, stolen, hacked, sold, whatever) I have to rely on the recipient to actively do it. I'm sure you all know 90%+ never change their defaults. SnapChat flips that default around, unless the recipient has done something very particular in order to keep it the default is that it will be deleted. It's a pretty big friendly hint that hey look at this it's cool, but you don't want Facebook to have a huge dossier on you. When it comes to social media you really should compare it to the alternatives...

      --
      Live today, because you never know what tomorrow brings
  10. Misunderstanding the Point of Snapchat by ASpotySpot · · Score: 5, Informative

    As a fairly heavy user of snapchat I see all these comments about it failing due to poor security just plain wrong. Almost no-one uses it for the security. Its about the lack of cost if the picture is 'wrong' or poor. Sending selife's or pictures of what's happening in your day is a nice way to keep in touch with someone. It feels more personal than text or voice and is much easier to do. Who cares if its a bad picture or a little boring, its gone in 10 seconds. Maybe some have a usecase for high security (nude pictures etc) but that isn't the largest market, or at least in my experience.

    1. Re:Misunderstanding the Point of Snapchat by Anonymous Coward · · Score: 2, Informative

      http://www.cbc.ca/news/canada/montreal/child-porn-charges-laid-against-10-laval-teens-1.2426599 "Child porn charges laid against 10 Laval teens Police allege boys traded screen grabs of girlfriends' explicit Snapchat photos ..."

  11. Re:PC equivalent? by deconfliction · · Score: 2

    Is there a good PC version of any of these? It seems odd that they're phone-only, messaging on the computer is still very much a thing.

    People who are advanced enough to use a keyboard interface to a computing device are smart enough to know the entire premise for the product is a fraud.