As promised, here is the technical audit of Signal (v8.3.4) and Wire (v4.21.0) using the GAMA v1.0 methodology. Analysis is strictly based on evidence from production binaries (DEX, ELF, Smali).Key Findings:Post-Quantum: Signal uses a continuous PQ-ratchet (ML-KEM1024). Wire implements a hybrid KEM (Kyber768 Draft) in MLS setup.Metadata: Signal's Sealed Sender v2 obfuscates the social graph. Wire's architecture prioritizes enterprise federation over metadata hiding.Telemetry: Detected a Firebase Measurement Connector bridge in Wire's production build.Integrity: Binary evidence of Signal’s SVR2 Noise channel for SGX-backed PIN recovery.I have also corrected material errors from my preliminary notes regarding SQLCipher and PQC in Wire. This is an objective look at architectural trade-offs.Feedback and peer review are welcome to improve the GAMA framework.Full Report:
https://blackcodeitalia.wordpress.com/2026/03/22/comparative-binary-analysis-of-signal-8-3-4-and-wire-4-21-0-a-gama-v1-0-perspective/

for gama methods availabile on my github repository

#Infosec #Signal #Wire #SignalApp #WireApp #Cybersecurity #BinaryAnalysis #GAMA #PostQuantum #Privacy

Interesting reflection on the landscape of #chat systems from @wireapp .
https://wire.com/en/blog/lessons-from-the-signalgate-crisis
Indeed it shows that there's a lot of progress still to be done and that consumer social networks may need differentiation.

What is shimmering in all this is the wish to have tools that are able to speak to various security levels... The mail apps do this mostly. The landscape is by far more advanced and more nuanced.

#signal #wireapp #whatsapp #telegram #slack #msteams

Signal needs a dedicated web app or at least "linked device" support on #Android. The fact the only "linked device" support is on the #iPad or desktop is frustrating.

Screenshot: Me loading my #Wire messages in #Firefox.

#Signal #SignalApp #Wire #WireApp

@Bernard

I got my family on #WireApp , which *had* a good privacy policy. They were bought and deleted all the clauses about not selling PII. It was tough convincing family something bad was up, when the app looked like it still worked the same.

Now I check the funding plan on any new app before getting others involved.

Sure, not every app will make money, but every VC expects a plan to try.

Not being up front with that plan is a red flag for me. Still need to research #Simplex.

#Privacy

Encrypted Messaging Survey

I am interested in your thoughts regarding encrypted messaging apps for the ordinary user. The use case is: typical user who is concerned about their privacy and has a family and social circle of people who use iOS and Android. As such, iMessage and RCS are off the table. Of the following, which would you recommend and why? Are there others that should be considered?

Thanks!

#infosec #privacy #encryptedmessaging #signalapp #whatsapp #threema #telegram #matrix #element #wireapp #wicker