Hi SM,
No I have not tried the app in Mauritius yet and how to make sure that it
actually works or not is another issue; maybe DIYing a catcher and testing
the app using same may help.
About the end-to-end encryption about WhatsApp; they (WhatsApp) wrote [1] :
"WhatsApp's end-to-end encryption is available when you and the people you
message use the latest versions of our app. Many messaging apps only
encrypt messages between you and them, but WhatsApp's end-to-end encryption
ensures only you and the person you're communicating with can read what is
sent, and nobody in between, not even WhatsApp. This is because your
messages are secured with a lock, and only the recipient and you have the
special key needed to unlock and read them. For added protection, every
message you send has its own unique lock and key. All of this happens
automatically: no need to turn on settings or set up special secret chats
to secure your messages."
I feel quite insecure about that End-to-End thing and do not think that it
is reliable.
Regarding the OpenSSL, I assume that he meant encrypted traffic etc, but
SSL Stripping etc came to my mind then. Sincerely, I am not sure relative
to the link you posted, and I may have to dig a little further about it.
Regards;
[1] -
https://www.whatsapp.com/security/
On 2 May 2016 at 23:23, S Moonesamy <sm+mu_at_elandsys.com> wrote:
> Hi Irshaad,
> At 12:55 02-05-2016, Mohammad Irshaad Abdool wrote:
>
>> I wrote a little follow-up article to that subject, hope that helps.
>>
>
> It's nice to see you writing about this topic.
>
> Did you try the Android-IMSI-Catcher-Detector in Mauritius? Are you sure
> that it will work? :-)
>
> What is "End-to-End Encryptions"? Why does the article say that "there's
> nothing you can do against encrypted connections even if you are in control
> of the traffic"? What if there is the following issue:
> https://mta.openssl.org/pipermail/openssl-announce/2016-April/000069.html
>
> Regards,
> S. Moonesamy
>
--
*Mohammad Irshaad Abdool*
*Sakarya University ; Turkey*
*irshaad.me <http://irshaad.me> | blog.irshaad.me <http://blog.irshaad.me>*
*facebook.com/abdoolirshaad <http://facebook.com/abdoolirshaad>*
Received on Tue May 03 2016 - 09:17:24 PST