Welcome!

Welcome to the 1337pwn community forums. Register now for an account.

Register Now

Announcement

Collapse
No announcement yet.

Wickr vs. Signal (Privacy)

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Wickr vs. Signal (Privacy)

    What are some major privacy advantages Wickr has over Signal?

    #2
    One of the big reasons someone may want to go with Wickr is that it doesn't require a phone number, an email address, or other personal information that may ultimately be used to identify a user to the Wickr company or users. Once you register a Wickr ID, you would be the only individual that is aware of the ID.

    Signal currently requires a phone number in the signup process and may leak your IP if you are not prudent. In contrast, Wickr permits you to set up how it connects, by means of proxies, inter alia.

    Wickr uses a more thorough wiping technology, Secure Shredder, which overwrites deleted files with a random sequence of 0s and 1s. In most cases, this prohibits deleted data from being successfully recovered. Moreover, Wickr's Secure Shredder cleans the RAM after every message or image is opened.

    On the contrary, Signal permits the user to render sent and received messages "disappear" after a specific amount of time has expired.

    Comment


      #3
      Originally posted by The Professor View Post
      One of the big reasons someone may want to go with Wickr is that it doesn't require a phone number, an email address, or other personal information that may ultimately be used to identify a user to the Wickr company or users. Once you register a Wickr ID, you would be the only individual that is aware of the ID.

      Signal currently requires a phone number in the signup process and may leak your IP if you are not prudent. In contrast, Wickr permits you to set up how it connects, by means of proxies, inter alia.

      Wickr uses a more thorough wiping technology, Secure Shredder, which overwrites deleted files with a random sequence of 0s and 1s. In most cases, this prohibits deleted data from being successfully recovered. Moreover, Wickr's Secure Shredder cleans the RAM after every message or image is opened.

      On the contrary, Signal permits the user to render sent and received messages "disappear" after a specific amount of time has expired.
      I appreciate the informative response. You have me extremely convinced that Wickr could be the gold standard for secure messaging applications.

      I was also wondering are there any reasons a user would pick Signal over Wickr? I hear that Wickr is open source, can you elaborate on that?

      Comment


        #4
        Originally posted by Trinity View Post

        I appreciate the informative response. You have me extremely convinced that Wickr could be the gold standard for secure messaging applications.

        I was also wondering are there any reasons a user would pick Signal over Wickr? I hear that Wickr is open source, can you elaborate on that?
        One of the most significant reasons someone would choose to use Signal over Wickr is that Signal is fully open source. In other words, Signal's application and server are entirely open source.

        Contrarily, Wickr's application and server are not entirely open source. Wickr has merely published an encryption protocol on GitHub called Wickr-Crypto-C which is solely employed in their enterprise product, Wickr Professional. Hence, Wickr is not truly open source.

        Moreover, Signal is generally more popular, commonly used, and simply easier to comprehend and deploy. It would appear that Signal is generally viewed as the gold standard of encrypted messaging applications.

        Comment


          #5
          Wickr is an excellent, solid application. It has had several, independent third party evaluations. Some security professionals may be a little bit suspicious about anything that is not free and open-source. Of course, it's best to actually examine and understand the code.

          Comment


            #6
            What do you guys think of the likelihood that deleted data can be effectively recovered from Wickr apps by a complex adversary using high-quality forensic tools?

            Comment


              #7
              Originally posted by c1ph3r View Post
              What do you guys think of the likelihood that deleted data can be effectively recovered from Wickr apps by a complex adversary using high-quality forensic tools?
              There are many factors to take into consideration for the successful rate of data recovery within a device, notably the type of device that is being used, the type of operating system (Mobile, Desktop), whether full disk encryption (FDE) is used on the device (iOS/Android FDE, VeraCrypt for computers), and the strength of encryption password.

              Other factors include when the device was seized, whether the device was on when seized (Perhaps RAM acquisition is possible), the type of storage device (HDD, SSD) acquired, and the time span that passes between erasure and recovery.

              Wickr does utilize encrypted application storage and authentication to defend against an adversary that attempts to gain unauthorized access to a target's device and examine their data --- whether or not a forensic tool is deployed.

              Comment


                #8
                Originally posted by The Professor View Post

                One of the most significant reasons someone would choose to use Signal over Wickr is that Signal is fully open source. In other words, Signal's application and server are entirely open source.

                Contrarily, Wickr's application and server are not entirely open source. Wickr has merely published an encryption protocol on GitHub called Wickr-Crypto-C which is solely employed in their enterprise product, Wickr Professional. Hence, Wickr is not truly open source.

                Moreover, Signal is generally more popular, commonly used, and simply easier to comprehend and deploy. It would appear that Signal is generally viewed as the gold standard of encrypted messaging applications.
                These are some convincing points you've made. After reading this thread, it looks like choosing between these two apps is largely a matter of preference and taste. Thank you guys for the useful information.

                Comment


                  #9
                  One very important fact that hasn't been mentioned is that Wickr Inc. is a for-profit corporation. This means that they are primarily interested in making a profit. If they may obtain more money by betraying their users, there could be an extremely high possibility that they carry out that.

                  Open Whisper Systems is a non-profit software organization that develops the Signal app and protocol. Signal would not betray its users since it is financed by donations and grants.

                  Comment

                  Working...
                  X