On: Facebook Tells Barr It Won’t Open Up Encrypted Mes...

[schoen]

> even the best security researchers would not detect it

By examining only the network traffic, sure, but what about by examining the code?

[bduerst → schoen]

Is the facebook app open source?

[schoen → bduerst]

Nope!

That hasn't necessarily stopped people from learning something about how it works, though.

[chopin → schoen]

true, but does someone do it? I remember that auditing Truecrypt was already a substantial deliberate undertaking.

And that' not even taking into account that it might be possible to push something different to each user.