Project

General

Profile

Feature #15196

Feature #14567: Investigate mobile messaging applications

Test Wire in Tails

Added by u over 1 year ago. Updated over 1 year ago.

Status:
Confirmed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
01/18/2018
Due date:
% Done:

0%

Feature Branch:
Type of work:
Research
Blueprint:
Starter:
Affected tool:

Description

Wire is a new app (https://wire.com/en/), working on smart devices and cross platform desktop which allows for instant messaging and video calls.

There is no official Debian package yet (no RFP nor ITP either -> we might want to start with this.).

https://github.com/wireapp/wire-desktop/wiki/How-to-install-Wire-for-Desktop-on-Linux#installation-on-debian-based-distributions

It has good chances of working over Tor: https://support.wire.com/hc/en-us/articles/115005697189-How-I-can-connect-through-a-proxy-server-on-desktop-

(Did not try it myself.)

History

#1 Updated by u over 1 year ago

  • Parent task set to #14567

#2 Updated by goupille over 1 year ago

I gave a try to Wire in tails 3.4 :

There is a debian package (https://wire-app.wire.com/linux/debian/pool/main/wire_3.0.2816_amd64.deb) "However, it is an experimental build and we expect to see some issues in day-to-day usage. We don't offer official support at the moment, but any issues can be reported via https://github.com/wireapp/wire-desktop"
their repo is only accessible with https, the package is 51Mb and depends on gconf2-common libappindicator1 libdbusmenu-glib4 libdbusmenu-gtk libgconf-2-4 libindicator7 (After this operation, 7,685 kB of additional disk space will be used.)

I started wire-desktop --proxy-server="socks5://localhost:9050" in a terminal (starting it through Applications>Internet>Wire didn't work, there is no way to configure the proxy in the GUI)

you can then create an account with a phone number OR with an email address (a verification code is sent in both cases), and the settings seems to be stored in ~/.config/Wire/

I was able to send and receive text messages.
I was also able to receive VOIP calls, but I wasn't able to initiate a call (apparently wire tries to talk to the gateway on the local network) :

[5629:0122/000322.890145:ERROR:stunport.cc(88)] Binding request timed out from 192.168.122.x:48881 (eth0)

I didn't try video calls.

#3 Updated by u over 1 year ago

  • Subject changed from Test Wire to Test Wire in Tails
  • Status changed from New to Confirmed

#4 Updated by u over 1 year ago

goupille wrote:

I gave a try to Wire in tails 3.4 :

<3!

I was also able to receive VOIP calls, but I wasn't able to initiate a call (apparently wire tries to talk to the gateway on the local network).

For this problem we should try to see if it works in Debian / if this was a firewall issue?

#5 Updated by goupille over 1 year ago

For this problem we should try to see if it works in Debian / if this was a firewall issue?

I tried on a debian sid and a debian stretch, on both, ferm was stopped and wire-desktop used tor with the option above, and voice call are working well.
when ferm is started with the default configuration there are no issues either, it is only my firewall rules (and those of tails) that prevent wire to 'get out'.

I can't test video calls since I don't have webcams.

#6 Updated by goupille over 1 year ago

note that for some "multi-device usability", Wire is keeping (apparently unencrypted) the list of your contacts on their server until you delete your account : https://motherboard.vice.com/en_us/article/secure-messaging-app-wire-stores-everyone-youve-ever-contacted-in-plain-text

the key is attached to a device, not to the account, and it is not easy to verify (I mean, there is no "verify" button, I had to search a little to find the fingerprint of my contact).

#7 Updated by u over 1 year ago

goupille wrote:

note that for some "multi-device usability", Wire is keeping (apparently unencrypted) the list of your contacts on their server until you delete your account : https://motherboard.vice.com/en_us/article/secure-messaging-app-wire-stores-everyone-youve-ever-contacted-in-plain-text

the key is attached to a device, not to the account, and it is not easy to verify (I mean, there is no "verify" button, I had to search a little to find the fingerprint of my contact).

Thanks for reporting back! I will add this info to the blueprint https://tails.boum.org/blueprint/mobile_messaging/!

#8 Updated by mercedes508 over 1 year ago

their repo is only accessible with https, the package is 51Mb and depends on gconf2-common libappindicator1 libdbusmenu-glib4 libdbusmenu-gtk libgconf-2-4 libindicator7 (After this operation, 7,685 kB of additional disk space will be used.)

I'm trying it right now in Tails 3.5, and it needs libdbusmenu-gtk4 and not libdbusmenu-gtk.

Also available in: Atom PDF