4 ms·

Well, yeah, duh. What do you expect them to do? Hire a PMC and fight a war with the police when they come around to raid the server room? Go into hiding so tha

• oehpr 6y ago
  >What do you expect them to do? Hire a PMC and fight a war with the police when they come around to raid the server room? Go into hiding so that the security agency can't steal the upgrade signing key from them? No, we want them to assume the same thing we are assuming. That if their service becomes successful, they will be coerced to compromise their users, regardless of how frequently they promise that they would never do so. If they are even bothering to make public announcements like this, then that means they believe the security of their system can be founded on the honor of their employees. It's important to recognize that this isn't even true if you assume every member of their team is an uncorruptible seraphim. Instead, where possible, the service should be zero knowledge, where not possible, it should be considered insecure.
• mirimir 6y ago
  > We can't expect all of the internet to operate like Wikileaks and The Pirate Bay. Why not? That's just what it takes. > If the justice system is broken, then the people aren't safe. It is, and they are. After 50 years under the heel of the war on drugs, how is it not 100% obvious?
• teknologist 6y ago
  Building reasonable end-to-end encryption in the first place isn't rocket science. In fact, Keybase have done just that. As well as WhatsApp, Signal, and many others.