Slashdot Mirror
Microsoft Partners with Signal to Bring End-To-End Encryption to Skype (bleepingcomputer.com)
Microsoft and Open Whisper Systems (makers of the Signal app) surprised many on Thursday when they said they are partnering to bring support for end-to-end (E2E) encrypted conversations to Skype. From a report: The new feature, called Skype Private Conversations has been rolled out for initial tests with Skype Insider builds. Private Conversations will encrypt Skype audio calls and text messages. Images, audio or video files sent via Skype's text messaging feature will also be encrypted. Microsoft will be using the Signal open-source protocol to encrypt these communications. This is the same end-to-end encryption protocol used by Facebook for WhatsApp and Facebook Messenger, and by Google for the Allo app.
Is it surprising that this is still legal (at least in some countries)?
is not if there's a backdoor, but rather, how many backdoors will be present and for whose purposes
At a time when so many governments on Earth are scrambling for a way to surveil all communications how likely is it really that Microsoft would being true end-to-end encryption to something like Skype? I bet there's a backdoor.
== Jez ==
Do you miss Firefox? Try Pale Moon.
First they DELIBERATELY weaken the Skype architecture to make it easier for various 3-letter agencies to eavesdrop on Skype calls and now we are supposed to trust they have their users best interest on their mind? Yeah, right. Without access to the source code, why would anyone sane consider the implementation to NOT be broken-by-design?
Still more difficulties for law enforcement agencies? There are evil geniuses at Microsoft, too!
Rome taught me patience and assiduous application to detail. Virtues which temper the boldness of great, general views.
Microsoft and Open Whisper Systems (makers of the Signal app) surprised many on Thursday when they said they are partnering to bring support for end-to-end (E2E) encrypted conversations to Skype.
That is a surprise. I had no idea Skype still existed.
"That's the way to do it" - Punch
You can have the strongest end-to-end encryption you want...it doesn't mean much if you don't know how your private and session keys are handled. It's all down to trusting the vendor that you're supposedly hiding your messages from with "end-to-end" encryption.
I never get used to these constant resurrections
Wait, didn't M$ remove p2p-e from the original Skype when they acquired it?
They have made it impossible to use for any conference calls. You must have a subscription. Both people must be using the same software. This is a toy at best. And that is when it actually works right.
The important thing for the surveillers is keeping a running log of who you talk to and when you talk to them and that is still preserved and not encrypted. Having the actual messages is nice, but not nearly as important as knowing who you talk to and when. This is also why Facebook, of all people, allows it on their programs.
Next they'll say they designed a new p2p model for Skype
Why exactly would I install Skype?
And on the PC I still use the original Jitsi, and it is still awesome. (Yes, all Java problems are patched.)
I have my own xmpp static IP home server with federation and omemo support anyway, so I donâ(TM)t even need Signal. I'm planning to lightweigt-fork it though. And I am offering $50 complete full-featured ARM home server solution for friends too, which are becoming increasingly popular. (Sorry, true trusted security requires me to actually meet in person and ideally get to know you, so no online sale.)
I seem to recall that the original Skype before MS bought it did this already ?
Microsoft has a history of cooperation with the feds. They implemented a centralized server away from p2p in order to at least give the feds access to monitor the Skype network. Signal is true end to end encryption. Efforts to merge the two will simply give the government access to the encrypted communication. Skype is a proprietary piece of software and thus cannot be audited. I've no idea whether Signal has been compromised but I'm leaning in that direction otherwise why else would they be working with a company known to violate their user's privacy and security.
You can lead a man with reason but you can't make him think.
Do these different implementations of Signal protocol interoperate? i.e. can someone with Signal talk to someone else who uses WhatsApp and then presumably someone else who has Skype?
Just sad. Most of my friends work or have worked there, and it's sad how they've laid-off their most experienced people to save money. Currently setting up a new OpenVPN server, and it supports great encryption and has since I started using it 15+ years ago! Sad Microsoft can't beat that open source project from well over a decade ago.
which is an open source protocol will we be able to build 100% open source software that interoperates with other Skype users ? I somehow can't see that happening - I would like to be proven wrong.
If I create a open source protocol and M$ "uses" it do I "partner" with them? The fuck no! Source seems to be some hipster who has "computer" in the URL and doesn't understand a shit about computers? It suggests M$ showed interest in the famous Signal app, which they didn't.
Microsoft took over Skype just so they could put backdoors in it.
you-->encrypted-->microsoft
something.. something.. prism
microsoft->encrypted->yourfriend
there's no fucking way microsoft will be allowed by "secret letters" and other demands made by the feds to implement true end-to-end encryption.. the kind microsoft or the government do not possess the keys (or other ways around it) for.
who don't understand that end-to-end encryption means nothing for your private communication since Microsoft will also keep the keys, which they mention nothing of.
The feds will still know who you're talking to and when. It's not E2E if Microsoft chooses the key.
Anyone got any recommendations for software for end to end encrypted VOIP using PC's?
The permissions it asks for are actually functional. Camera for video chat, microphone for voice chat, contacts for easy verification. You do not HAVE to grant it any of those to use it via text. No app could do voice without microphone permissions.
Signal is good enough for Edward Snowden but not good enough for you, eh?
And I hate Microsoft. Why are people unable to recognize and praise something good? If you need serious security, obviously do not use Skype. Use Signal itself or Wire or Telegram. But if Skype is getting better security, that is a positive step. It means the market is pushing in the right direction. Quit whining about it.
is to open-source the entire app.
It is pitch black. You are likely to be eaten by a grue.
Then something E.
Then something else E.
using tox for the last 4 years, so microsoft can eat shit for waking up too late for this opportunity
What are good, secure options suitable as replacements for Skype (mainly telephony and video aspects)?