<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Security is not an absolute. No tool will give you that. However,
what the security community considers a threshold for any product is
transparency and disclosure of vulnerabilities. This allows an
iterated security path. <br>
<br>
What worries me about today's Guardian article on WhatsApp is not
that there is a crypto blindspot but that the security researcher
claims to have informed WhatsApp security team back in April 2016
(responsible disclosure) but the parent company, Facebook, did not
consider patching it a priority:<br>
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<blockquote>"Boelter reported the backdoor vulnerability to Facebook
in April 2016, but was told that Facebook was aware of the issue,
that it was “expected behaviour” and wasn’t being actively worked
on. The Guardian has verified the backdoor still exists." <br>
</blockquote>
That is my real concern. <br>
<br>
<br>
<div class="moz-cite-prefix">On 13/01/2017 19:00,
<a class="moz-txt-link-abbreviated" href="mailto:kictanet-request@lists.kictanet.or.ke">kictanet-request@lists.kictanet.or.ke</a> wrote:<br>
</div>
<blockquote
cite="mid:mailman.95.1484323233.1271.kictanet@lists.kictanet.or.ke"
type="cite">
<pre wrap="">Send kictanet mailing list submissions to
<a class="moz-txt-link-abbreviated" href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>
To subscribe or unsubscribe via the World Wide Web, visit
<a class="moz-txt-link-freetext" href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a>
or, via email, send a message with subject or body 'help' to
<a class="moz-txt-link-abbreviated" href="mailto:kictanet-request@lists.kictanet.or.ke">kictanet-request@lists.kictanet.or.ke</a>
You can reach the person managing the list at
<a class="moz-txt-link-abbreviated" href="mailto:kictanet-owner@lists.kictanet.or.ke">kictanet-owner@lists.kictanet.or.ke</a>
When replying, please edit your Subject line so it is more specific
than "Re: Contents of kictanet digest..."
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">Today's Topics:
1. Re: CA Speaks to Internet Shutdowns and "Monitoring" of
Online Comms (Nanjira Sambuli)
2. Re: CA Speaks to Internet Shutdowns and "Monitoring" of
Online Comms (Keith Andere)
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
kictanet mailing list
<a class="moz-txt-link-abbreviated" href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>
<a class="moz-txt-link-freetext" href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Moses Karanja
<a class="moz-txt-link-abbreviated" href="http://www.moseskaranja.com/blog">www.moseskaranja.com/blog</a>
</pre>
</body>
</html>