ISIS Now Has Its Own Encrypted Messaging App; Doubt They'll Abide By Politicians' Demands For Backdoors

from the just-saying... dept

As law enforcement and politicians still keep pushing American companies to backdoor encryption, making the technology less secure and more dangerous for everyone, no one has explained how this will actually help in stopping terrorists from communicating secretly. Back in December, the Open Technology Institute released a paper that detailed how so many encrypted messaging systems were either open source or not controlled by US companies. It even took a WSJ report on the messaging apps that ISIS apparently was “recommending” to people and noted how most of them are not controllable by US laws:

And, of course, it should come as little surprise that some security folks are reporting that they’ve spotted a new secure messaging app that appears to have been created by ISIS itself:

ISIS has a new Android app for exchanging secure messages, joining another app that distributes propaganda and recruiting material, according to a counterterrorism network called the Ghost Security Group.

While the report notes that the app is “rudimentary” that doesn’t mean it won’t be improved over time. But, more importantly, it highlights that efforts to backdoor or undermine encryption on American companies certainly won’t do a damn thing to stop ISIS from communicating securely. Yes, some will argue that ISIS’ homegrown encrypted messaging apps are probably much more vulnerable to NSA cracking, but it still doesn’t change the fact that demanding backdoors into US companies messaging systems won’t magically lead to uncovering ISIS communications. It will just make Americans less secure.

Filed Under: , , , , ,

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “ISIS Now Has Its Own Encrypted Messaging App; Doubt They'll Abide By Politicians' Demands For Backdoors”

Subscribe: RSS Leave a comment
48 Comments
teknosapien (profile) says:

See what happens when politicians

See what happens when we open our mouths we bring attention to a potential issue to our enemies, and they’ve take steps to avoid getting caught. I’m guessing they never, ever thought about encrypting their messages until US government officials started bitching about it to the media. Way to go law enforcement for making us more un-safe with your rhetorical dribble and whining

Anonymous Coward says:

Re: Network layers principle [was ]

deep packet decryption will determine what type of encryption is used and if its approved by the home land.

In Networking 101, undergraduates learn about the layering principle in protocol stacks. You learn how to a higher-level protocol employs services from a lower layer to wrap its messages: TCP over IP to give an example.

Any protocol designer (even an undergraduate!) should find it obvious that a bespoke-encryptation protocol message may be carried over a general-distribution-encryptation layer.

If you’re doing packet inspection deep enough to break through the approved-for-public-use encrypted layer, then what the fucking-fuck? The approved-for-public-use encrypted layer must not be worth a damn.

Anonymous Coward says:

Re: Re: Network layers principle [was ]

To make this just a little bit more accessible: Suppose that Alice is reading Techdirt, using a device connected to the ‘net via WiFi. The end-to-end connection is HTTPS (HTTP over TLS). The point-to-point connection uses WPA2 (CCMP).

Eve is passively capturing the WiFi traffic.

If Eve can identify that Alice is using TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, then GOTO FAIL.

Anonymous Coward says:

Re: Re: too big to fail

This WILL happen at some point, and the government will just throw a couple hundred billion dollars at the “problem” that is too big to fail.

The problems us little people have is that we don’t think big enough, why bother with petty larceny when you can fleece the populace for billions AND get a handout from the government for doing it?

Anonymous Coward says:

Re: Re: Re: Re:

I keep some money in my bank account (well most of it is a credit margin, don’t have a single credit card) so I can buy bitcoins with interac e-transfer. When I graduated my bank was wetting their pants at offering me 125k credit margins….went with the 50k one, and the lowest I ever went was -4000. All this to say i’m in the positive, but just ever barely, because I withdraw my money, and will be doing so even more than before in the future.

The rest is this plastic-paper mix that is still physical currency, saved right at home. Savings accounts are a joke if you’re not depositing 25k in it minimum.

Anonymous Coward says:

Re: Re: Re: Re:

You miss the point that having such a backdoor is a positive boon to terrorists, because it gives an easy, simple point of failure.

Plus, if you have this backdoor, then it’s possible for that toi be abused to make it much more difficult to trace, as with the root access required by governmental backdoors, root gives you near limitless power over that server.

Anonymous Coward says:

And that's no surprise...

Because while they use “terrorism!” as their reason for backdooring encryption, the real goal is so they can go back and read every citizen’s encrypted communications post-facto when they want to dig up dirt on someone.

The vocal politicians may not realize that is the real goal, but whomever is pulling the strings certainly does…

Anonymous Coward says:

Re: And that's no surprise...

What’s worse than backdooring encryption is removing it entirely.

My friends who all did the scan-your-msn-messenger to get your facebook friends thing back in 08-09, and was forced to do so in ’10 wasn’t so bad when Pidgin with OTR XMMP chat worked with facebook contacts. Now that facebook doesn’t allow XMMP protocol chat anymore, it can eat a dick, and I’ll never install, even in a linux crossover box, facebook messenger.

JBDragon (profile) says:

Re: Re:

That’s why they have the Child Molester to fall back on!!! Have to protect the kids!!! Can’t do that if you’re phone and data is encrypted. Who these people are sending messages to? “Hey Bob, guess what? I just kidnapped a 6 year old boy and am hanging out at my cabin in the woods! Don’t tell anyone now!”

Darn if we just had a backdoor in that encryption that kids life would be saved!!! We’d be able to read that message and come and save the day!!! HAHAHAHAHA, Ya right, Who would do such a dumb thing? These politicians think everyone is just dumb. Maybe most are as they’re in office!!

Guess what, with a Warrant, in hand, shown to you, you have to Unlock your phone and let them in!!! That’s the law!!! They just want to easily spy on everyone on everything looking for anything. Guilty of something or not. With NO warrant. Or some dumb abused warrant that just lets them get away with anything they want.

Anonymous Coward says:

Re: Re: Re:

Take comfort that for a rare time Canada is worse, and can check your cellphone (make a copy of the drive even) at customs if they feel like it and you don’t have a say. Cops can do that with everyone’s phone.

There’s many reasons I never bought anything after the Blackberry that came out in 2012, 1) I like real keyboards 2) A hell lot of security reasons.

Capt ICE Enforcer says:

No fear

Citizens of the world. Do not fear the new encryption app that terrorist are using. We will rush thru and pass a law that will protect us.

Proposed law: SNAFU-4BG&G Or Situation Normal, All Fucked Up for Bad Guys And Girls…

– Starting immediately, all individuals who plan to do anything that would hurt the feelings of a 2 year old child, or animal, or imaginary friends, or Justin Bieber shall cease all actions which involve encryption. For websites that require encryption your password must be Password123! Failure to obey the law will result in a 3 tier fine.
1st offense $25.00
2nd offense $50.00
All addition offenses will result in a fine of $75.00 and 6 hours of watching the Golden Girls.

This will surely stop all individuals with bad thoughts.

Capt ICE Enforcer
President 2020

That One Guy (profile) says:

Bloodthirsty thugs? Yes. Lawbreakers? Why of course not!

But, more importantly, it highlights that efforts to backdoor or undermine encryption on American companies certainly won’t do a damn thing to stop ISIS from communicating securely. Yes, some will argue that ISIS’ homegrown encrypted messaging apps are probably much more vulnerable to NSA cracking, but it still doesn’t change the fact that demanding backdoors into US companies messaging systems won’t magically lead to uncovering ISIS communications. It will just make Americans less secure.

Nonsense, clearly after mandatory backdoors in encryption are rolled out, the next step is to make it so that using non-backdoored encryption is illegal. I mean, ISIS may be a group of pathetic butchers, with a habit of killing people that disagree with their thuggery, but surely they wouldn’t break the law by continuing to use illegal encryption, right?

Same with other criminals, sure they may break a few laws here and there, but if the government made using real encryption illegal, I’m sure they’d honor it, and stop there. “We may be willing to break other laws, but violating the law against encryption? That’s one step too far!” would be the common response, of this I’m sure.

That One Guy (profile) says:

Re: Re: Bloodthirsty thugs? Yes. Lawbreakers? Why of course not!

Between the two, mass idiocy vs dishonesty, I think I’ll go with the latter.

I can absolutely believe that a few of those involved are just that stupid when it comes to encryption, but too many people who should absolutely know better calling for crippling a key safety feature that protects the public under the guise of ‘combating crime/terrorism’? No, that I do not buy.

They aren’t stupid, they’re dishonest, and they’re using the boogiemen to try and frighten people into undermining safety for their sake, not the sake of the public they claim their trying to ‘protect’.

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Ctrl-Alt-Speech

A weekly news podcast from
Mike Masnick & Ben Whitelaw

Subscribe now to Ctrl-Alt-Speech »
Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...