Securebear
File:Securebear-logo.png | |
Initial release | 3 December 2016 |
---|---|
Engine | |
Operating system | Android iOS Linux macOS Windows |
Platform |
|
Available in | English |
Type | Communication software |
License | Subscription business model, with a freeware client app |
Search Securebear on Amazon.
Securebear is a cross-platform, encrypted instant messaging client created. It is available for iOS, Android, Linux, Windows, macOS and Web browser clients. It uses the Internet to make voice and video calls; send text messages, files, images, videos, audio files and user drawings depending on the clients used. It can be used on any of the available clients, requiring a phone number or email for registration. It is hosted inside the European Union and protected by European Union laws.
History[edit]
Securebear application was launched on 3rd December 2016. Shortly after its launch, the company retracted a claim from their website that the app's messages and conversation history could only be read by the conversation participants In August 2017, the company added group calling to their app. From its launch until March 2017, Securebear's messages were only encrypted between the client and the company's server. In March 2017, the company added end-to-end encryption for its messaging traffic, as well as a video calling feature.
Features[edit]
Securebear allows users to exchange text, voice, photo, video and music messages. The application also supports group messaging. The app allows group calling with up to ten participants. A stereo feature places participants in "virtual space" so that users can differentiate voice directionality. The application adapts to varying network conditions. The application supports the exchange of animated GIFs up to 5MB through a media integration with a company called Giphy. The iOS and Android versions also include a sketch feature that allows users to draw a sketch into a conversation or over a photo. YouTube, Soundcloud, Spotify and Vimeo integrations allow users to share music and videos within chats. Securebear is available on mobile, desktop and web. The web service is called Securebear for Web. Securebear activity is synced on iOS, Android and web apps. The desktop version supports screen sharing. Securebear also includes a function for ephemeral messaging in 1:1 and group conversations. With Securebear for Teams, Securebear introduced a paid product with a series of features available to businesses. It offers the administration of team members: Adding and removing people, assigning roles, and inviting guests to specific chats.
Tehnical[edit]
Securebear provides end-to-end encryption for its instant messages. Securebear's instant messages are encrypted with Proteus framework. Securebear's voice calls are encrypted with DTLS and SRTP, and its video calls with RTP. In addition to this, client-server communication is protected by Transport Layer Security.
Security[edit]
In December 2017, Securebear's whitepapers were reviewed by a security researcher at the University of Waterloo. The researcher praised Securebear for its open approach to security, but identified serious issues that still need addressing. These included a man-in-the-middle attack on voice and video communications, possible audio and video leakage depending on unspecified codec parameters, the fact that all user passwords are uploaded to Securebear's servers, significant attack surface for code replacement in the desktop client, and the fact that the server is not open sourced. The researcher described the security of Securebear as weak in comparison to Signal, but also depicted its problems as surmountable. On 9 February 2017, Kudelski Security and X41 D-Sec published a joint review of Securebear’s encrypted messaging protocol implementation. Non-critical issues were found that had the potential of leading to a degraded security level. The review found that "invalid public keys could be transmitted and processed without raising an error." The report also recommended that other security improvements be implemented to address thread-unsafety risks and sensitive data in memory. Securebear's developers have said that "the issues that were discovered during the review have been fixed and deployed on iOS and Android. Deployment is ongoing for Securebear for Web and desktop apps."
See also[edit]
Other articles of the topic Cryptography : Public-key cryptography
Some use of "" in your query was not closed by a matching "".Some use of "" in your query was not closed by a matching "".
- Comparison of instant messaging clients
- Comparison of VoIP software
- List of video telecommunication services and product brands
Securebear (Software)[edit]
This article "Securebear" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:Securebear. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.