<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Security is not an absolute. No tool will give you that. However,
what the security community considers a threshold for any product is
transparency and disclosure of vulnerabilities. This allows an
iterated security path. <br>
<br>
What worries me about today's Guardian article on WhatsApp is not
that there is a crypto blindspot but that the security researcher
claims to have informed WhatsApp security team back in April 2016
(responsible disclosure) but the parent company, Facebook, did not
consider patching it a priority:<br>
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<blockquote>"Boelter reported the backdoor vulnerability to Facebook
in April 2016, but was told that Facebook was aware of the issue,
that it was �expected behaviour� and wasn�t being actively worked
on. The Guardian has verified the backdoor still exists." <br>
</blockquote>
That is my real concern. <br>
<br>
<br>
<div class="moz-cite-prefix">On 13/01/2017 19:00,
<a class="moz-txt-link-abbreviated" href="mailto:kictanet-request@lists.kictanet.or.ke">kictanet-request@lists.kictanet.or.ke</a> wrote:<br>
</div>
<blockquote
cite="mid:mailman.95.1484323233.1271.kictanet@lists.kictanet.or.ke"
type="cite">
<pre wrap="">Send kictanet mailing list submissions to
<a class="moz-txt-link-abbreviated" href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>
To subscribe or unsubscribe via the World Wide Web, visit
<a class="moz-txt-link-freetext" href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a>
or, via email, send a message with subject or body 'help' to
<a class="moz-txt-link-abbreviated" href="mailto:kictanet-request@lists.kictanet.or.ke">kictanet-request@lists.kictanet.or.ke</a>
You can reach the person managing the list at
<a class="moz-txt-link-abbreviated" href="mailto:kictanet-owner@lists.kictanet.or.ke">kictanet-owner@lists.kictanet.or.ke</a>
When replying, please edit your Subject line so it is more specific
than "Re: Contents of kictanet digest..."
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">Today's Topics:
1. Re: CA Speaks to Internet Shutdowns and "Monitoring" of
Online Comms (Nanjira Sambuli)
2. Re: CA Speaks to Internet Shutdowns and "Monitoring" of
Online Comms (Keith Andere)
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
kictanet mailing list
<a class="moz-txt-link-abbreviated" href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>
<a class="moz-txt-link-freetext" href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Moses Karanja
<a class="moz-txt-link-abbreviated" href="http://www.moseskaranja.com/blog">www.moseskaranja.com/blog</a>
</pre>
</body>
</html>