[liberationtech] Viber is secure?

[Eric S Johnson]

>From today’s Dragon News Bytes:

 

Title: Viber Communication Security - unscramble the scrambled

Author: Michiel Appelman, Jeffrey Bosma and Gerrie Veerman

Source: SNE/OS3

Date Published: 24th December 2011

 

'....In the past couple of years more and more communications which

used to use the regular mobile operator networks started moving

towards ip-based networks. This has given rise to ‘apps’ on

smartphones that enable consumers to connect to each other without

the use of their mobile operator. More recently the security

implications of switching from the closed network of the operator to

the open Internet have become apparent after some ‘apps’ have shown

severe weaknesses. In this project we will take a look at one app in

particular: Viber, a voip application used on cellphones. The report

tries to answer the question how Viber performs — security-wise — in

comparison to other services. A definitive conclusion has not been

found but most details of the protocol used to transfer the voice

data have been documented. The application code has been analyzed

but no real weaknesses were found. This lack of weaknesses found

doesn’t mean that the app is secure, due to limited time and

experience of the authors a lot of investigation is

still to be done......'

 

https://www.os3.nl/_media/2011-2012/students/jeffrey_bosma/ssn_report.pdf

 

Haven’t read it yet.

 

Best,

Eric

PGP <http://keyserver.pgp.com/vkd/DownloadKey.event?keyid=0xE0F58E0F1AF7E6F2> 

 

From: liberationtech-bounces at lists.stanford.edu [mailto:liberationtech-bounces at lists.stanford.edu] On Behalf Of Amin Sabeti
Sent: Friday, 21 September 2012 17:53
To: liberationtech
Subject: Re: [liberationtech] Viber is secure?

 

Thanks guys, I sent an email to Viber and I haven't received any responses from them.

 

Nathan is there any chances you or your colleagues test it and publish the result? Because it so popular amongst the Iranian activists.

 

Thanks,

 

A 

On 21 September 2012 01:04, Eric S Johnson <crates at oneotaslopes.org> wrote:

Popular in Ethiopia too (where I was, last week).

 

PGP <http://keyserver.pgp.com/vkd/DownloadKey.event?keyid=0xE0F58E0F1AF7E6F2> 

 

From: liberationtech-bounces at lists.stanford.edu [mailto:liberationtech-bounces at lists.stanford.edu] On Behalf Of Amin Sabeti
Sent: Thursday, 20 September 2012 23:07
To: Liberation Technologies
Subject: [liberationtech] Viber is secure?

 

Hey LibTech,

 

At this time, Viber (http://www.viber.com/) is so popular amongst the Iranian people and it is one of the popular communication ways in Iran. 

 

I was wondering to know this app is secure or not? The data is encrypted or not?

 

Thanks,

 

Amin


--
Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20120921/5cc2e6ce/attachment.html>