eth hacker :: collectooor :: security research @nascent

wow, signal is speedrunning the death of all security advantages it had:

wow, signal is speedrunning the death of all security advantages it had: https://community.signalusers.org/t/public-signal-backups-testing/69984

BDFL of Quilibrium, Eng @ Farcaster, ex-Coinbase, always opinionated, never hydrated

/quilibrium

blockspace babe. cultural attaché from ‘06 twitter. adjacent possible fanatic 🌐 UTC–4

love this. now why do we trust other tools to do proper encryption — in transit and at rest — and to store it without the provider holding a key

Say you and your friend pass notes to each other in class, but you change the code every day so confiscated notes from the teacher on one day can't be used to decode the next day's notes. But then your friend decodes all the notes in a journal that he puts a padlock on, and leaves it in his locker. One day, the principal busts open the locker smelling something strange, and finds the journal and some weed. He breaks open the journal, and now your clever code scheme doesn't mean shit, and you're getting blamed for selling weed because the journal said something about your yard having skunks

say more sailor. explain it to us like we're eleven

Specifically: Why isn’t Telegram end-to-end encrypted by default? https://telegra.ph/Why-Isnt-Telegram-End-to-End-Encrypted-by-Default-08-14

Aviator, diver, Etherean, nexialist, PhD in aviation and climate science, host of /diving /ethfinance /forteantimes /geopolitics /science /singapore /thomas

I hate this — it was the exact mistake that Durov made a decade ago

But all the other kids are doing it...🙄

Ug I hate this. People request this feature all the god damn time on the Signal subreddit and every time I ask them if they're a cop, and tell them that they have to tell me if they're a cop.

This is absolutely a tool being built for law enforcement, and will be used to violate the privacy of well meaning users.