4 ms·
E2E is only a thing if you trust the app at both ends - which in a lot of E2E solutions means a closed-source blob that could be collecting and sending back the
by arcticbull 4y ago
E2E is only a thing if you trust the app at both ends - which in a lot of E2E solutions means a closed-source blob that could be collecting and sending back the exact same data but mined from the client. It's not a panacea unfortunately.
- atoav 4y agoUsing an app won't be necessary since their web developement is mobile first, right? /s
- edrxty 4y agoThe point they're making is that if facebook didn't insist on mining everyone's chat histories, they wouldn't be in hot water for having to comply with bullshit search warrants. This is a solved problem in the tech space, they just choose profits over the safety of their users and now they get to reap the PR rewards. I fucking hate apple but the model they're taking is to take reasonable steps to frustrate state level actors (minus the CP photo upload thing) and as such have set a standard that needs to be followed.
- snoopy_telex 4y agoAll it would take is for the user to use iCloud backups, which are enabled by default, for Apple to be able to hand over the users complete iMessage archive. Apple has done a wonderful job marketing something that doesn’t Turkey exist.
- arcticbull 4y agoMy point was if they wanted E2E data, they'd just send it back to the server from the recipient. You have to trust the recipient app not to.
- Timshel 4y agoIt's not a panacea but it's already world apart. The default business model for Meta is to sell targetted publicity depending on what they inferred on you through your publication. Can't really openly sell it the same way if you are supposed to be E2E .. And it's not like open-source is a panacea either, for most people who will not build it themselves you usually can't really know what is deployed/distributed. Was going to use Element as an example but on F-droid the app is built and signed by the platform and an archive with sources is distributed. But last I check the same can't be said for the play store and you have no idea what's running on app.element.io and there is an open issue for reproducible build for the electron app. But at each step you are gaining something it's not "only a thing ...".