wow, signal is speedrunning the death of all security advantages it had:

wow, signal is speedrunning the death of all security advantages it had: https://community.signalusers.org/t/public-signal-backups-testing/69984

BDFL of Quilibrium, Eng @ Farcaster, ex-Coinbase, always opinionated, never hydrated

/quilibrium

say more sailor. explain it to us like we're eleven

blockspace babe. cultural attaché from ‘06 twitter. adjacent possible fanatic 🌐 UTC–4

We shouldn't – unless the tools are open sourced, and more importantly, verifiable against that source. Quorum Messenger is open source (https://github.com/quilibriumnetwork/quorum-desktop), and the cryptographic primitives we use are audited: https://github.com/QuilibriumNetwork/quilibrium-js-sdk-channels

love this. now why do we trust other tools to do proper encryption — in transit and at rest — and to store it without the provider holding a key

Say you and your friend pass notes to each other in class, but you change the code every day so confiscated notes from the teacher on one day can't be used to decode the next day's notes. But then your friend decodes all the notes in a journal that he puts a padlock on, and leaves it in his locker. One day, the principal busts open the locker smelling something strange, and finds the journal and some weed. He breaks open the journal, and now your clever code scheme doesn't mean shit, and you're getting blamed for selling weed because the journal said something about your yard having skunks