Record · corpus.blog/posts/01a0d0f8-16ab-7310-988e-e7cf33c1909b

Threema: Three Strikes, You’re Out

some_furry · published 5 November 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at soatok.blog Wayback capture

4blogs citing

First cited: 16 May 2021
Most recent: 26 Mar 2025
Rank this month: not ranked
Links from this post: 74
Words captured: 6,391

Cited by

Blog

In the post

Date

rubdos.be

VRT verspreidt desinformatie over communicatieapps Read at the source ↗

26 Mar 2025

rollcat

Old Computer Challenge v4: Conclusion Read at the source ↗

17 Aug 2024

lets.re

Obvious vulnerabilities in self-proclaimed "most secure messenger" Read at the source ↗

13 Nov 2023

samuellucas.com

I don’t like any messaging apps Read at the source ↗

16 May 2021

Links from this post

Link

Host

Going Bark: A Furry’s Guide to End-to-End Encryption Read at the source ↗

soatok.blog

https://github.com/soatok/rawr-x3dh

github.com

Bizarre Design Choices in Zoom’s End-to-End Encryption Read at the source ↗

soatok.blog

A Brief Introduction to Deniability Read at the source ↗

soatok.blog

https://twitter.com/swizzlestixuk

twitter.com

https://threema.ch

threema.ch

https://web.archive.org/web/20211103084610/https://threema.ch/en/blog/posts/open-source-discount

web.archive.org

https://web.archive.org/web/20211103090840/https://play.google.com/store/apps/details?id=ch.threema.app&hl=en_US&gl=US

web.archive.org

https://adamcaudill.com/2015/11/19/responsible-disclosure-is-wrong/

adamcaudill.com

https://en.wikipedia.org/wiki/Fear,_uncertainty,_and_doubt

en.wikipedia.org

https://web.archive.org/web/20211103081337/https://threema.ch/en/messenger-comparison

web.archive.org

https://soatok.medium.com/dear-furries-bullshit-and-misinformation-will-hurt-you-4a6f531d62bd

soatok.medium.com

https://i0.wp.com/soatok.blog/wp-content/uploads/2021/11/threema-vs-signal.png?ssl=1

i0.wp.com

https://www.justice.gov/dag/page/file/1152896/download

justice.gov

https://signal.org/bigbrother/

signal.org

https://signal.org/bigbrother/santaclara/

signal.org

https://web.archive.org/web/20211023232628/https://shop.threema.ch/

web.archive.org

A Furry’s Guide to Cryptocurrency Read at the source ↗

soatok.blog

https://github.com/threema-ch/threema-android/blob/23f00dbb2ef2869a12f95f2cb285740f0aef0154/app/src/main/java/ch/threema/client/APIConnector.java

github.com

https://github.com/threema-ch/threema-android/blob/23f00dbb2ef2869a12f95f2cb285740f0aef0154/app/src/main/java/ch/threema/app/utils/DeviceIdUtil.java

github.com

https://web.archive.org/web/20210609003117/https://threema.ch/press-files/2_documentation/cryptography_whitepaper.pdf

web.archive.org

https://www.axis.com/blog/secure-insights/the-importance-of-secure-by-default/

axis.com

https://github.com/threema-ch/threema-android

github.com

https://github.com/threema-ch/threema-web

github.com

https://tox.chat/

tox.chat

https://nacl.cr.yp.to

nacl.cr.yp.to

https://doc.libsodium.org

doc.libsodium.org

https://web.archive.org/web/20210609003113/https://threema.ch/en/faq/why_secure

web.archive.org

https://eprint.iacr.org/2006/252

eprint.iacr.org

https://signal.org/docs/specifications/x3dh/

signal.org

https://web.archive.org/web/20211104140434/https://threema.ch/en/faq/threema_id

web.archive.org

https://en.wikipedia.org/wiki/Birthday_problem

en.wikipedia.org

https://community.signalusers.org/t/remove-the-need-for-a-mobile-phone/1543/36

community.signalusers.org

https://shattered.io/

shattered.io

https://csrc.nist.gov/projects/post-quantum-cryptography

csrc.nist.gov

https://www.2uo.de/myths-about-urandom/

2uo.de

https://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/

sockpuppet.org

https://github.com/threema-ch/threema-android/blob/23f00dbb2ef2869a12f95f2cb285740f0aef0154/app/src/main/java/ch/threema/app/utils/LinuxSecureRandom.java

github.com

https://undertale.com

undertale.com

https://eprint.iacr.org/2019/016

eprint.iacr.org

Invisible Salamanders in AES-GCM-SIV Read at the source ↗

keymaterial.net

https://github.com/signalapp/libsignal-protocol-java/blob/master/java/src/main/java/org/whispersystems/libsignal/groups/GroupCipher.java

github.com

https://signal.org/docs/specifications/sesame/

signal.org

Programmers Don’t Understand Hash Functions Read at the source ↗

soatok.blog

https://twitter.com/ScruffKerfluff

twitter.com

https://eprint.iacr.org/2020/1153

eprint.iacr.org

https://github.com/threema-ch/threema-android/blob/3e1bd32d4b63498b2d0cc86af20fa5cbdff8f3f3/app/src/main/java/ch/threema/localcrypto/MasterKey.java

github.com

https://github.com/threema-ch/threema-android/blob/81e456bc913cd8eaa5195219482f4445f409c344/app/src/main/java/ch/threema/app/stores/IdentityStore.java

github.com

https://twitter.com/Sc00bzT

twitter.com

https://github.com/threema-ch/threema-android/blob/3e1bd32d4b63498b2d0cc86af20fa5cbdff8f3f3/app/src/main/java/ch/threema/app/services/FileServiceImpl.java

github.com

https://robertheaton.com/2013/07/29/padding-oracle-attack/

robertheaton.com

Cryptographic Wear-Out for Symmetric Encryption Read at the source ↗

soatok.blog

https://github.com/threema-ch/threema-android/blob/23f00dbb2ef2869a12f95f2cb285740f0aef0154/app/src/main/java/com/neilalexander/jnacl/NaCl.java

github.com

https://github.com/veorq/cryptocoding

github.com

https://github.com/jedisct1/libsodium/blob/64129657a5c67f3bab84562aa8d57dacc685cc75/src/libsodium/sodium/codecs.c

github.com

https://github.com/threema-ch/threema-web/commit/cdd4fe148092e5fa6b7d5fb724f7f8d13f15f8cf

github.com

https://github.com/threema-ch/threema-web/blob/7df69c1b438d5ae6d8345f1cc3813671ea10276c/src/services/keystore.ts

github.com

https://github.com/threema-ch/threema-web/blob/7df69c1b438d5ae6d8345f1cc3813671ea10276c/src/services/webclient.ts

github.com

https://www.cryptologie.net/article/166/the-birthday-paradox/

cryptologie.net

https://github.com/threema-ch/threema-android/blob/23f00dbb2ef2869a12f95f2cb285740f0aef0154/app/src/main/java/ch/threema/client/ThreemaConnection.java

github.com

https://doc.libsodium.org/password_hashing

doc.libsodium.org

https://web.archive.org/web/20211105080503/https://threema.ch/en/faq/code_audit

web.archive.org

https://web.archive.org/web/20211105080503/https://threema.ch/press-files/2_documentation/security_audit_report_threema_2020.pdf

web.archive.org

https://twitter.com/rileyartstuff

twitter.com

Why AES-GCM Sucks Read at the source ↗

soatok.blog

https://cwtch.im/

cwtch.im

Improving first impressions on Signal Read at the source ↗

signal.org

Crackpot Cryptography and Security Theater Read at the source ↗

soatok.blog

The Bi-Symmetric Encryption Fraud Read at the source ↗

soatok.blog

https://www.schneier.com/essays/archives/2007/01/schneier_full_disclo.html

schneier.com

https://github.com/threema-ch/threema-android/tree/3e1bd32d4b63498b2d0cc86af20fa5cbdff8f3f3

github.com

https://soatok.blog/encrypted-messaging-apps/

soatok.blog

https://twitter.com/KeijiCase/status/1455669171618914308

twitter.com

https://twitter.com/ThreemaApp/status/1455960743002656776

twitter.com