lunes, 24 de agosto de 2020

Group Instant Messaging: Why Blaming Developers Is Not Fair But Enhancing The Protocols Would Be Appropriate

After presenting our work at Real World Crypto 2018 [1] and seeing the enormous press coverage, we want to get two things straight: 1. Most described weaknesses are only exploitable by the malicious server or by knowing a large secret number and thereby the protocols are still very secure (what we wrote in the paper but some newspapers did not adopt) and 2. we see ways to enhance the WhatsApp protocol without breaking its features.

We are of course very happy that our research reached so many people and even though IT security and cryptography are often hard to understand for outsiders, Andy Greenberg [2], Patrick Beuth [3] and other journalists [4,5,6,7,8] wrote articles that were understandable on the one hand and very accurate and precise on the other hand. In contrast to this, we also saw some inaccurate articles [9,10] that fanned fear and greatly diverged in their description from what we wrote in our paper. We expected this from the boulevard press in Germany and therefore asked them to stick to the facts when they were contacting us. But none of the worst two articles' [9,10] authors contacted us in advance. Since our aim was never to blame any application or protocol but rather we wanted to encourage the developers to enhance the protocols, it contradicts our aim that WhatsApp and Signal are partially declared attackable by "anyone" "easily" [9,10].

Against this background, we understand Moxie's vexation about certain headlines that were on the Internet in the last days [11]. However, we believe that the ones who understand the weaknesses, comprehend that only the malicious server can detectably make use of them (in WhatsApp) or the secret group ID needs to be obtained from a member (in Signal). As such, we want to make clear that our paper does not primarily focus on the description of weaknesses but presents a new approach for analyzing and evaluating the security of group instant messaging protocols. Further we propose measures to enhance the analyzed protocols. The description of the protocols' weaknesses is only one part of the evaluation of our analysis approach and thereby of the investigation of real world protocols. This is the scientific contribution of our paper. The practical contribution of the analyzed messengers, which is the communication confidentiality for billion users (in most cases), is great and should be noted. Therefore we believe that being Signal, WhatsApp, or Threema by applying encryption to all messages and consequently risking research with negative results is much better than being a messenger that does not encrypt group messages end-to-end at all. We do not want to blame messengers that are far less secure (read Moxie's post [11] if you are interested).

Finally we want note that applying security measures according to the ticket approach (as we call it in the paper [12]) to the invitation links would solve the issues that Facebook's security head mentioned in his reply [13] on our findings. To our knowledge, adding authenticity to group update messages would not affect invitation links: If no invitation link was generated for a group, group members should only accept joining users if they were added by an authentic group update message. As soon as a group invitation link was generated, all joining users would need to be accepted as new group members with the current design. However there are plenty ways how WhatsApp could use invitation links without endowing the server with the power to manage groups without the group admins' permission:
One approach would be generating the invitation links secretly and sharing them without the knowledge of the server. An invitation link could then contain a secret ticket for the group and the ID of the group. As soon as a user, who received the link, wants to join the group, she can request the server with the group ID to obtain all current group members. The secret ticket can now be sent to all existing group members encrypted such that the legitimate join can be verified.

Of course this would require engineering but the capability of WhatsApp, shipping drastic protocol updates, can be assumed since they applied end-to-end encryption in the first place.


Further articles:
- Matthew Green's blog post:
- Schneier on Security:
- Bild:
- Sun:

Related word

  1. Hack Tools For Ubuntu
  2. Hacking Tools For Kali Linux
  3. Pentest Tools Download
  4. World No 1 Hacker Software
  5. Hacking Tools For Windows Free Download
  6. Pentest Tools Open Source
  7. Pentest Reporting Tools
  8. Best Pentesting Tools 2018
  9. Easy Hack Tools
  10. Hacker Tool Kit
  11. Bluetooth Hacking Tools Kali
  12. Hack Tools Online
  13. Hack Tools Pc
  14. Ethical Hacker Tools
  15. Hacker Tools Software
  16. Hacking Tools For Windows 7
  17. Hack Tools For Ubuntu
  18. Pentest Tools Online
  19. Hacking Tools Online
  20. Pentest Tools Find Subdomains
  21. Hack Tools For Pc
  22. Hacking Tools Hardware
  23. Hacker Tools List
  24. Install Pentest Tools Ubuntu
  25. Hacker Tools For Pc
  26. Hack Tools For Ubuntu
  27. Hacker Tools For Windows
  28. Pentest Tools Framework
  29. Hacks And Tools
  30. Pentest Tools Framework
  31. World No 1 Hacker Software
  32. Pentest Automation Tools
  33. Pentest Tools Subdomain
  34. Hacking Tools For Windows Free Download
  35. Install Pentest Tools Ubuntu
  36. Hacking Tools Mac
  37. Hack Tools 2019
  38. Hacker Tool Kit
  39. Hack Tool Apk
  40. Hacking Tools For Pc
  41. Pentest Recon Tools
  42. Pentest Tools Url Fuzzer
  43. Hacker Tools Apk Download
  44. Hacker Tools
  45. Hacker Tools For Ios
  46. Hacker Tools Linux
  47. Hacker Tools Hardware
  48. Hackers Toolbox
  49. Hacker Tools List
  50. Top Pentest Tools
  51. Hacker Techniques Tools And Incident Handling
  52. Pentest Tools Kali Linux
  53. Github Hacking Tools
  54. Pentest Tools Windows
  55. Computer Hacker
  56. Tools For Hacker
  57. Usb Pentest Tools
  58. Hacker Tools Free
  59. New Hacker Tools
  60. Hacker Tools Linux
  61. Hacks And Tools
  62. Hack Tools Github
  63. Pentest Tools Apk
  64. Computer Hacker
  65. Pentest Automation Tools
  66. Pentest Reporting Tools
  67. Usb Pentest Tools
  68. Hack Tools
  69. Hack Tools For Pc
  70. Hack Tools Github
  71. Pentest Tools Open Source
  72. Kik Hack Tools

No hay comentarios:

Publicar un comentario