Hacker News new | past | comments | ask | show | jobs | submit login
AWS Wickr (amazon.com)
11 points by solatic on July 28, 2022 | hide | past | favorite | 7 comments



> AWS Wickr encrypts every message, call, and file with a >>proprietary<<, 256-bit end-to-end encryption (E2EE) protocol. No one but intended recipients can decrypt them, reducing the risk of person-in-the-middle (PitM) attacks.

I couldn't find how it actually secures the communication beyond "just trust us" type marketing content on the website.


You are looking at a preview signup page. Two clicks in you can find links to the whitepaper and code on Github: https://wickr.com/security/


You beat me to it. I was just about to point out exactly the same thing.

This also reminds me of “Schneier‘s Law” [0], something that I suspect even AWS would not be immune to.

0: https://www.schneier.com/blog/archives/2011/04/schneiers_law...


Right, if it’s not open sourced then most likely they have something to hide via omission. I mean, I do appreciate the bluntness over some obscure concoction of FOSS security libs marketed as some cutting edge technology stack. At least they tell it how it is.

But unsurprisingly, it’s opaque in stating to what extent does AWS provide itself a means to drop in and listen if it was legally compelled to.

Yeah, definitely valuable and useful to many, but not to those who are the most vulnerable imho.


It's some company they acquired (linked from the post page):

https://wickr.com/aws-has-acquired-encrypted-messaging-servi...

They sell mostly to police and military and security types.

Everything about this makes me want to puke. Their customers, the likely reasons for the acquisition, the unfettered right of big tech to acquire shit and no one on this thread even noticed, the implications of AWS partnering more and more with the military, integrating into the slimy government borg in the same way big banks do. Amazon will eventually be the unofficial fifth arm of the government just as Blackrock is the fourth.


Indeed. And with their recent healthcare acquisition, they aim to be your primary care physician, too! They already spy on you with Ring and Alexa. You're in such good hands with Amazon.


Anyone knows good open source E2EE encryption communication libraries (text, voice + video with WebRTC support), preferably in Go or Rust.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: