2 ms·
These goal posts are related. Given the context of the five eyes backdoor discussions it is not unreasonable to expect that a government could pressure Whisper
by lrvick 8y ago
These goal posts are related.
Given the context of the five eyes backdoor discussions it is not unreasonable to expect that a government could pressure WhisperSystems to manipulate a client update or patch a server, GPL laws be damned. A single employee could also be bribed or blackmailed. Intel could also be compelled to falsely attest an SGX enclave.
When it comes to protecting privacy against highly motivated and sophisticated adversaries then centralized trust is just not an option to be taken seriously. It creates a Lavabit sized target.
A company that is as serious about privacy as their marketing indicates would, like TOR, encourage as many servers to run as possible to ensure there is no central pressure point to abuse.
Cards on the table: I find Moxies insistence on a walled garden while using Open Source and Privacy to market it simply unethical.
I do again appreciate the updates on the current status of their public source code though. I will strive for better accuracy in the future on this.