Are messaging apps REALLY secure?

Person 1: My messenging app is more secure.
Person 2: No, MINE is!
Person 3: No way, I ONLY use Signal - it's the most secure!
Okay, y'all are fired. What if I told you that NONE of the messaging apps you use are really, truly secure?
Sound crazy?
Well, it is. The encryption is as good as you're gonna get. The problem is the way it's used that actually matters...
Join me for a deep dive into the wonderful world of encryption!
Goodies from the Vid:
Crypto 101 book download: crypto101.io
AES on Wikipedia: en.wikipedia.o...
Is Telegram Safe? - clario.co/blog...
Diffie-Hellman diagram: en.wikipedia.o...
More techie tips: scottiestech.info

[@jasonsurra8077]

Thank you Scotty. I often find it very hard to explain to my friends and family that you cannot trust the software and the network. Both are compromised by the fact that software runs one instruction at a time and that telling you that it has done something is a different step to doing the thing. Additionally messages on the network go through someone's server who will have access to the messages, no matter what. now the cloud is the new item of conversation. Well, thank you for explaining encryption so clearly.

[@sonykd5591]

In the end WHO OWNS THE COMPANY is Important ?? No matter the encryption, Key Maker opens the door

[@sonykd5591]

Also BRAXME is an interesting guy but he can easily be pressured like Mr.Mc. Affee who was offed.. Kurdish Engineer :)

[@sonykd5591]

Good video, but we want a more comprehensive one from you :)

[@Franz-jb1dg]

That is very True. 💯 Agree. Spot On

[@hokimocus]

That's it, I am going back to copper wire land line and a message machine. Apparently, the only way forward is backward.

[@RetroCaptain]

If you are in NA that's gone the way of the DoDo bird. Bell Canada Bell South etc etc etc all have pretty much disconnected from the actual hard wiring and went digital (+ it was agency hackable in the 1950s so it never was private) The global leaders haaaate privacy if it isn't only for themselves and do everything in their power to remove it. Have to use Postal Mail and write to the person in your own private code that only you and him know.

[@AnnaVannieuwenhuyse]

Don't forget about the actual wire tap days

[@ethimself5064]

@@AnnaVannieuwenhuyse This would tale a search and seize order from a judge in the free world anyway

[@theycallme_D]

@@ethimself5064 Not if they claim Reco or Patriot act then no warrant is needed

[@ethimself5064]

@@theycallme_D That would be rather a hard core situition I guess

[@TheWeatherbuff]

Thanks Scotty! By the way, a big "hello" to my friends at the NSA, CIA, FBI and IRS. Just want y'all to know that I have no plans for anything nefarious... at least not right now.

[@JesseP.Watson]

Thank you Scottie, good to get some resolution in these matters, always been a little sceptical of encrypted chat... seems a bit too good to be true.

[@blissbrain]

Can you make a video for how us laypeople can safely buy items via paypal or do our online banking? Is this a dumb question? Probably. Still, I can't do in person banking, because the company isn't nearby.

[@ScottiesTech]

Online purchases and banking are relatively secure. I mean, NOTHING is 100% secure, but they do an admirable job. The biggest risk is phishing schemes. So, best option for online banking is to learn directly from the bank how to log in, do they ever send you e-mails about changing passwords, etc. Once you know all that, ignore any e-mails or whatever. And Rule #1 is never log in to any financial thing without triple-checking the URL of the site. That's how phishing scams work: you click a link in a fake bank-looking e-mail, and what you see in your browser is what looks like your bank - but if you look at the URL in the address bar, it'll be something like "bank-of-the-universe.amazon-aws.com" and not the real "bank-of-the-universe.com" site. So, that 1 simple step of always checking and re-checking the address of the site you visit can save you the most headaches - by far.

[@grantaum9677]

My guess would be that the nearest to secure was the one that just had it's leader detained. My second guess is that now it's no longer secure..

[@OlegFilippov-e5m]

Scottie thanks , good to hear another point of view on these important issues :)

[@Sugarput1]

Thanks so much Scottie!!! 🙏🏻🙏🏻🙏🏻🕊️🕊️🕊️❤️❤️❤️

[@em4me-Dan]

Great video!👏 Well explained.👍 Thanks, Scottie and kudos from NYC.🗽

[@The...0_0...]

What about Threema ...

[@ethimself5064]

I thought near anywhere the police etc could get a search warrant and size any computer and analyze the encryption to find what they want🤔

[@neilobusk]

soooo basically chatting with my russian chic aint safe....... super informative...excellentee N x

[@masterblockwarrior]

History might look back on this period as the dawn of disinformation. Thx as always.

[@billiamnotbob]

Not really. It's always been around but now it travels faster and farther than before, and reaches more people.

[@grantaum9677]

Wow they really don't like me commenting. What's wrong with typing "the information age" for it to get censored

[@sonykd5591]

@@masterblockwarrior history of electronic lies.. i had the tax department knocking on my door asking how much i pay for Rent ??? What a stupid fool of an ERA

[@ashokvankar7838]

Thank you for sharing Sir Helpful 🙏🙏🙏❤❤

[@GruttePier-co2uk]

You just trust some random dude's computer to keep your secrets secure 😄 Even if it's secure, you probably click on a fishing link. Just keep private things offline and have a happy life.

[@d.owenpowell9023]

Thanks. I deleted the messenger app and now all is well:)

[@ethimself5064]

Would not each party using a quality VPN work well for end to end encryption?

[@ScottiesTech]

Same basic issues with most VPNs.

[@grantaum9677]

I'm under the impression that the existence of such services is primarily to scramble comms for the intelligence agencies. We add our devices to their network, not the other way round I think

[@grantaum9677]

I have a feeling those services are more for their benefit than ours. We add our devices to their network..

[@theycallme_D]

do you recommend session? Seems to be the most secure for me

[@Pete.Ty1]

👍👍👍. Thank you

[@ElitsaMladenova]

Hey super review on this topic 🙂 What was the crypto low in France where apps have to provide private key to the FR government in order all messages to be able to be decrypted. Dose also some one know what is the protocol and implementation of the "secur messanger"?

[@AnonZero0]

*Good show!* *Smiles*

[@prof3bkr]

I'm using session for maximum private texting .. What do you think about that

[@WillD-ll7pm]

How secure is LINE?

[@DavidByers1eye]

Thank You . . . 1 Eye . . .

[@ashkanten]

pls make a video about P2P conncetions and how secure they are

[@Apollo440]

I use MIRC because it's old.

[@realmstupid-on8df]

If you don't own your own pgp keys ITS NEVER SAFE THIS NEVER CHANGES WHY DO PEOPLE GO THRU THIS EVERY OTHER YEAR

[@againstbulshit2895]

BRIAR

[@othman.kadmaoui]

Hello brother, i contacted you about a partnership but you didn't reply

[@rezzer7918]

Brilliant

[@IdeaSpotOrg]

Anything on other people/company servers is not secure. Less Trust, More Truth!

[@UsoundsGermany]

When the makers of the "apps" AND encryption is the same (behind the scenes)... the answer should be clear:===)

[@FreedomDaddy]

None of the ones mentioned are great. Most people have no clue.

[@QuantumRyan]

Telegram is probably the best of a very imperfect bunch.

[@lordawesomeguy]

I'm still betting on Signal, basically because of Trevor Perrin (not that Moxie guy), who is widely known for his cryptographic designs, like, for example, the Noise Protocol Framework (on which Wireguard is based). Signal's main crypto library is also based on a programming language that enforces memory safety. Of course, if we are sure that the Signal app we are downloading is built from the same source tree that we are looking at (reproducible builds). Lastly, avoid Signal Desktop, which ships and runs the whole Chrome browser engine with all the latest bugs added.

[@ScottiesTech]

@@Jean_Lebon Well, it WAS good enough... We'll see going forward!

[@ScottiesTech]

@@TheForwardThinker Nope!

[@UsoundsGermany]

@@TheForwardThinker How old are u or how long are u in the nets? Cause everyone knows YT (and others) "filter" comments now also for at least 2-3 years.