[Keepin_Pace]

I don't even need to look at the chart if whatsapp is ranked higher. Didn't they just have 10-13gb of information leaked recently?




Posted via CB10

[SethDove]

OK for all those that think that BBM isn't safe, why was BBM the only instant messaging platform that was ever banned by governments?

Posted via CB10

Only? Source to support this claim?
Also, without more details I could imagine they'd ban it for being insecure.

Posted via CB10

[bobshine]

Only? Source to support this claim?
Also, without more details I could imagine they'd ban it for being insecure.

Posted via CB10

You don't remember all those middle east countries trying to ban BlackBerry? And India? It drove BlackBerry (back then RIM) stock price down. Do a Google search, there is plenty info on that.

Now it's a non issue anymore cause BlackBerry's market share is so small... and everyone communicates on not secure messaging services.


Posted via CB10

[SethDove]

You don't remember all those middle east countries trying to ban BlackBerry? And India? It drove BlackBerry (back then RIM) stock price down. Do a Google search, there is plenty info on that.


Posted via CB10

Like this:
http://m.indiatoday.in/story/govt-to.../1/183403.html
Also, it was by no definition the only service ever banned.

Posted via CB10

[bobshine]

Like this:
http://m.indiatoday.in/story/govt-to.../1/183403.html
Also, it was by no definition the only service ever banned.

Posted via CB10

Exactly this. The government couldn't access BBM communications so they forced RIM to install a server that they can monitor in India or be banned.

I never heard of India asking Apple to install a server there or India banning Apple! Did you?

Posted via CB10

[SethDove]

I think you miss the larger point when you think it's ok that BlackBerry gives up your privacy to the government.
Also, there was plenty of talk about banning other services like Gmail and Skype. They probably all worked out a deal in secret. Real "secure".

Posted via CB10

[Tre Lawrence]

What I find somewhat hilarious is the fact that the EFF -- practically the definition of a pro-consumer entity -- gets the "treatment" for daring to imply that a BBRY product could be improved.

I think the criteria used doesn't work to underscore BBM's better points, but as far as ethics? If I had to pick which entity is more aligned with my interests, it would be the EFF over BBRY (or most for-profit entities).

[AnimalPak200]

If anything we will get a useful response by way of a Press release or fact check directly from BlackBerry.

The more we know, the better we can defend BBM,.. if indeed it is worth defending.

Posted via CB10

[clickitykeys]

EFF is a reputable and well-meaning organization, and I'd trust their ratings.

Q10/10.3.1.821

[Superdupont 2_0]

What I find somewhat hilarious is the fact that the EFF -- practically the definition of a pro-consumer entity -- gets the "treatment" for daring to imply that a BBRY product could be improved..

Well, uhm, actually the treatment is well deserved in this case, as they are making false statements.
For example, for BBM Protected the point "Are past communications secure if the keys are stolen?" is negative.

However, BBRY states on their website "Each message uses a new random symmetric key for message encryption" ... and the whitepaper is so clear and detailed about the crypto, that the criterions of EFF are fulfilled (imho).

I would also bet, that EFF didn't really look into the details how BBM Protected guarantees the "authenticity and non-repudiation of messages".

Normally I would trust the EFF more than BBYR, but in this particular case I think EFF should take a second look.


PS: Reading their "Methodology" at the bottom of the scorecard helps to understand why some points are negative. That's a fair game and BBYR should also have a look at this, because BBM for consumers is clearly behind (well, for me, a citizen in a developed western country, BBM's security level is enough and if police has a warrant and BBYR would cooperate, that's fair...but in other countries the local law could be a bit behind my understanding of human rights and...)

[jefbeard911]

Yes agree 100%, no way is yahoo messenger as secure as BBM, got to be spin masters at work here.

The point is that they are equally less secure.

Sent from my awesome BlackBerry Z3 running BlackBerry 10 - 2BBEAACF

[jefbeard911]

i clicked on the provided link, and went to the ranking, which is alphabetical, showing BBM as the second listing with BB "Protected" as the third listing. The rankings were heavily tilted towards open sourced type of code which I'm glad is not the case with BBM. Even Hushmail was ranked the same as BBM.

The reason Open source is so heavily noted and represented is that the best encryption is most always open source. This allows anyone to check and test it for vulnerability. Bad crypto is found out very quickly and either fixed or abandoned.



Sent from my awesome BlackBerry Z3 running BlackBerry 10 - 2BBEAACF

[jefbeard911]

Here's a good article summarizing EFF methodology and finding from Macworld UK.

http://www.macworld.co.uk/news/newsw...eview-3584206/

Sent from my awesome BlackBerry Z3 running BlackBerry 10 - 2BBEAACF

[jefbeard911]

I don't even need to look at the chart if whatsapp is ranked higher. Didn't they just have 10-13gb of information leaked recently?




Posted via CB10

In my mind this is a PASS/FAIL test. No need to argue over who sucks at security the most is there?

Sent from my awesome BlackBerry Z3 running BlackBerry 10 - 2BBEAACF

[AbAll87]

Well you guys can argue but BlackBerry has to respond to this!!! They talk so much about security, they need to back it up...

Bring the BBMfactcheck

I was shocked to see BBM protected not as secured

Z10STL100-3/10.3.0.1154

[dguy123]

The reason Open source is so heavily noted and represented is that the best encryption is most always open source. This allows anyone to check and test it for vulnerability. Bad crypto is found out very quickly and either fixed or abandoned.



Sent from my awesome BlackBerry Z3 running BlackBerry 10 - 2BBEAACF

The issue in open source SSL was there for how long?

Good theory, but doesn't always hold up in practice.

Posted via CB10

[SethDove]

The issue in open source SSL was there for how long?

Good theory, but doesn't always hold up in practice.

Posted via CB10

And what theory holds up all the time? It's a fallacy to expect it to.

Posted via CB10

[Bluenoser63]

The reason Open source is so heavily noted and represented is that the best encryption is most always open source. This allows anyone to check and test it for vulnerability. Bad crypto is found out very quickly and either fixed or abandoned.
Sent from my awesome BlackBerry Z3 running BlackBerry 10 - 2BBEAACF

This only works if the people who find the bug announce publicly.

"The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said. "
NSA Said to Exploit Heartbleed Bug for Intelligence for Years - Bloomberg

Did this happen? Who knows. But who is to say that others like the Russian mob, foreign government, etc didn't also know.

Open source only works if GOOD people find ALL the bugs and RELEASE the information. That can't always be the case.

If OpenSSL code wasn't released to the public, BAD people couldn't know where to look for vulnerabilities.

So to have this as a YES/NO check mark is dubious at best.

[endevour]

Exactly this. The government couldn't access BBM communications so they forced RIM to install a server that they can monitor in India or be banned.

I never heard of India asking Apple to install a server there or India banning Apple! Did you?

Posted via CB10

Wasn't this all in times of BIS?

[Bluenoser63]

Wasn't this all in times of BIS?

BBM on BIS uses the NOC, BBM on BB10 uses the NOC. Nothing has changed.

[Ferrari430Spider]

I smell bull sh*t

Bbm is far more superior and secure than any other messenger out there!

Trust the media to slate it so people use other messengers so their info can be read

Posted via CB10

[Tre Lawrence]

I smell bull sh*t

Bbm is far more superior and secure than any other messenger out there!

Trust the media to slate it so people use other messengers so their info can be read

Posted via CB10

The EFF is not a media outlet. I highly doubt it's part of "The Conspiracy."

[Bluenoser63]

The EFF is not a media outlet. I highly doubt it's part of "The Conspiracy."

No they are not. They want all digital information (good or bad) to be private.

The Electronic Frontier Foundation is the leading nonprofit organization defending civil liberties in the digital world. Founded in 1990, EFF champions user privacy, free expression, and innovation through impact litigation, policy analysis, grassroots activism, and technology development. We work to ensure that rights and freedoms are enhanced and protected as our use of technology grows.

Take this case..
http://www.cnet.com/news/post-reveng...ay-go-to-jail/

A bill signed by California Gov. Jerry Brown on Tuesday promises up to six months in jail and a $1,000 fine for people "convicted of illegally distributing private images with the intent to harass or annoy." Sponsored by Sen. Anthony Cannella (R-Ceres), Senate Bill 255 goes into effect immediately and makes posting "revenge porn" a misdemeanor.

The Electronic Frontier Foundation is one group that opposed the bill in June.

[eyesopen1111]

Here's a good article summarizing EFF methodology and finding from Macworld UK.

http://www.macworld.co.uk/news/newsw...eview-3584206/

Sent from my awesome BlackBerry Z3 running BlackBerry 10 - 2BBEAACF

^ THIS ^ is a very good article on this issue. Good solutions are available, and it's nice to see which companies are stepping up. I'll wait for BlackBerry to respond, but EFF is awesome.

I completely agree with the superiority of open source when it comes to security. At least with open source measures, there is room for public expert debate and flaws can be discovered. True, we need good people to disclose problems they find, but that's still better than being forced to trust closed source methods on faith. Since the Snowden revelations, you're a fool to trust any government or company, except those that can verify their methodologies in the full light of day.

Z-30 / STA100-5 / 10.3.0.1418 / T-Mobile USA

[kraidx]

I smell bull sh*t

Bbm is far more superior and secure than any other messenger out there!

Trust the media to slate it so people use other messengers so their info can be read

Posted via CB10

Instead of plotting conspiracy theories we should strive to improve the products of the company we support.

This EFF report is a welcome start on a debate that needs to happen. We can't just take the word of companies.
There needs to be audits and checks on the products that companies advertise.

Open source code and truly independent reviews are the best way to catch bugs.

Even if sometimes organisations with more manpower and resources use the open flaws to their advantage before others catch on. It's still better than having the code locked down without knowledge of its flaws.





Posted via CB10