Open WhisperSystems

From Wikipedia, the free encyclopedia
Jump to: navigation, search
This article is about an open-source software project. For the Twitter subsidiary, see Whisper Systems.
Open WhisperSystems
Open WhisperSystems logo.png
Website Open WhisperSystems
Commercial? No
Type of project Free and open-source software, Encryption software, Mobile software
Location San Francisco, CA
Owner Supported and owned by community[1]
Founder Moxie Marlinspike

Open WhisperSystems is a collaborative open source project, run by a small group of software developers,[1] that entails the development of a suite of mobile applications to help make communication more private and secure.

History[edit]

Security researcher Moxie Marlinspike and roboticist Stuart Anderson co-founded Whisper Systems in 2010.[2][3] In addition to launching TextSecure in May 2010, Whisper Systems produced RedPhone, an application that provides encrypted voice calls.[4] They also developed a firewall and tools for encrypting other forms of data.[2] RedPhone and TextSecure played a role in protester communications during the Arab Spring uprisings.[5]

On 28 November 2011, Twitter announced that it had acquired Whisper Systems for an undisclosed amount.[6] Shortly after the acquisition, Whisper Systems' RedPhone service was made unavailable,[7] though it was later released as free and open source software in July 2012. Some have criticized this removal, arguing that it was "specifically targeted [to help] people under repressive regimes" and that it left people like the Egyptians in "a dangerous position" during the events of the 2011 Egyptian revolution.[8]

Whisper Systems' TextSecure software was released as free and open source software about a month after the acquisition by Twitter.[2][9] The software has since been under open development by the community and has seen a number of new releases based on that open development. The project for this continued work was named Open WhisperSystems.[10]

In his keynote speech at SXSW 2014, NSA leaker Edward Snowden praised Open WhisperSystems' applications for their ease-of-use.[11][12]

Toward the end of July 2014, Open WhisperSystems announced Flock, a private contact and calendar cloud sync, and plans to unify its RedPhone and TextSecure applications as Signal.[13] These announcements coincided with the initial release of Signal for iOS.

Funding[edit]

Open WhisperSystems is a collective project made up of volunteers and a growing number of contributors, who are sometimes paid by donations and grants. Open WhisperSystems has received financial support from, among others, the Freedom of the Press Foundation.[14]

Open WhisperSystems' server infrastructure is funded through grants and donations they receive. The server-side architecture is federated. This will likely spread the cost over time. The developers of CyanogenMod already host the servers that handle the traffic for their users.[15]

Twitter has never contributed money or resources to Open WhisperSystems, and is not in control of any of the infrastructure.[16]

Active Projects[edit]

TextSecure-iOS[edit]

Further information: TextSecure

An open source instant messaging and text messaging application for iOS.

Open WhisperSystems has been working to bring TextSecure to iOS since March 2013.[17][18][19]

TextSecure[edit]

Main article: TextSecure
TextSecure

TextSecure is an open source encrypted messaging application for Android.[20] TextSecure can be used to send and receive text messages, media and other attachments. By default, the application will send all messages intended to other users of the application as instant messages over Wi-Fi, 3G or LTE. TextSecure encrypts both the message database on the user's device and all messages that are sent to other TextSecure users.[21][22][23]

The software is released under the GPLv3 license and is supported, developed on, and recommended by The Guardian Project.[24]

TextSecure-Server[edit]

Further information: TextSecure § Servers

The software that handles message routing for the TextSecure data channel is called TextSecure-Server. The complete source code of the TextSecure server is available on GitHub under the AGPLv3 license. This enables interested parties to examine the code and help the developers verify that everything is behaving as expected. It also allows advanced users to compile their own copies of the software and compare them with the software that is used by Open WhisperSystems and others.[25]

Client-server communication is protected by TLS/SSL. Communication is handled by a REST API and push messaging (both Google Cloud Messaging (GCM) and Apple Push Notification Service (APN)).[25] Support for WebSocket has been added.[26]

BitHub[edit]

An experiment in funding open-source software development by combining Bitcoin and GitHub.

RedPhone[edit]

RedPhone

RedPhone is an application that provides encrypted voice calls for users of the Android operating system and its derivatives. The application enables encrypted voice communication between its users. RedPhone integrates with the system dialer to provide a frictionless call experience, but uses ZRTP to set up an encrypted VoIP channel for the actual call. RedPhone was designed specifically for mobile devices, using audio codecs and buffer algorithms tuned to the characteristics of mobile networks, and uses push notifications to preserve the user's device's battery life while still remaining responsive.[27]

Flock[edit]

Flock is a secure syncing service for android which securely syncs calendar and contact information on android devices. Users have the ability to host their own server. [28]

See also[edit]

References[edit]

  1. ^ a b "Members of Open WhisperSystems on GitHub". 
  2. ^ a b c Garling, Caleb (2011-12-20). "Twitter Open Sources Its Android Moxie | Wired Enterprise". Wired.com. Retrieved 2011-12-21. 
  3. ^ "Company Overview of Whisper Systems Inc.". Bloomberg Businessweek. Retrieved 2014-03-04. 
  4. ^ Andy Greenberg (2010-05-25). "Android App Aims to Allow Wiretap-Proof Cell Phone Calls". Forbes. Retrieved 2014-02-28. 
  5. ^ Robert Lemos (2011-02-15). "An App for Dissidents". MIT Technology Review. Retrieved 2014-03-07. 
  6. ^ Tom Cheredar (November 28, 2011). "Twitter acquires Android security startup Whisper Systems". VentureBeat. Retrieved 2011-12-21. 
  7. ^ Andy Greenberg (2011-11-28). "Twitter Acquires Moxie Marlinspike's Encryption Startup Whisper Systems". Forbes. Retrieved 2011-12-21. 
  8. ^ Garling, Caleb (2011-11-28). "Twitter Buys Some Middle East Moxie | Wired Enterprise". Wired.com. Retrieved 2011-12-21. 
  9. ^ Pete Pachal (2011-12-20). "Twitter Takes TextSecure, Texting App for Dissidents, Open Source". Mashable. Retrieved 2014-03-01. 
  10. ^ "A New Home". Open WhisperSystems. 2013-01-21. Retrieved 2014-03-01. 
  11. ^ Max Eddy (Mar 11, 2014). "Snowden to SXSW: Here's How To Keep The NSA Out Of Your Stuff". PC Magazine: SecurityWatch. Retrieved 2014-03-16. 
  12. ^ Hanno Böck (Mar 11, 2014). "Snowden empfiehlt Textsecure und Redphone" (in German). Golem.de. Retrieved 2014-03-16. 
  13. ^ "Free, Worldwide, Encrypted Phone Calls for iPhone". 29 July 2014. 
  14. ^ "Open WhisperSystems". Freedom of the Press Foundation. 
  15. ^ Moxie Marlinspike (Mar 11, 2014). "How is openwhispersystems paying for the its server costs?". Open WhisperSystems. Retrieved 16 March 2014. 
  16. ^ Moxie Marlinspike (May 5, 2014). "1. What is TextSecure's ...". Retrieved 6 May 2014. 
  17. ^ DJ Pangburn (3 March 2014). "TextSecure Is the Easiest Encryption App To Use (So Far)". Motherboard. Retrieved 14 March 2014. 
  18. ^ Brian Donohue (Feb 24, 2014). "TextSecure Sheds SMS in Latest Version". Threatpost. Retrieved 2014-03-01. 
  19. ^ Christine Corbett (Mar 27, 2013). "Sure!". Open WhisperSystems. Retrieved 2014-03-16. 
  20. ^ "TextSecure on GitHub". Retrieved 26 February 2014. 
  21. ^ Molly Wood (19 February 2014). "Privacy Please: Tools to Shield Your Smartphone". The New York Times. Retrieved 26 February 2014. 
  22. ^ Moxie Marlinspike (24 February 2014). "The New TextSecure: Privacy Beyond SMS". Open WhisperSystems. Retrieved 26 February 2014. 
  23. ^ Martin Brinkmann (24 February 2014). "TextSecure is an open source messaging app with strong security features". Ghacks Technology News. Retrieved 26 February 2014. 
  24. ^ The Guardian Project. "Secure Mobile Apps". GuardianProject.info. Retrieved 26 February 2014. 
  25. ^ a b "TextSecure-Server on GitHub". Retrieved 2 March 2014. 
  26. ^ Open WhisperSystems. "Why do I need Google Play installed to use TextSecure on Android?". Retrieved 2014-03-13. 
  27. ^ "RedPhone on GitHub". Retrieved 2 March 2014. 
  28. ^ "Flock". Retrieved 31 July 2014. 

External links[edit]