3 ms·

Here’s the thing about deniability: even if you successfully remove all cryptographic proof of provenance, actually denying it is still asserting a frame job. T

Here’s the thing about deniability: even if you successfully remove all cryptographic proof of provenance, actually denying it is still asserting a frame job. That’s useless if the party you’re trying to mislead either is or trusts the data source, like, say, in the case of police surveillance, hackers, nation-state attackers… I think the real solution to future breaches is ephemerality, which is why it’s critical for any secure messaging service to not only implement all-participant auto-delete, but to also make it easy to opt in to only for specific messages, since that brings the cost:benefit down to a point that it’s actually used.

JoBrad 3y ago
The frame job is not a stretch. I’ve seen spear phishing campaigns that spanned weeks to convince someone that’s request to transfer money, at the very end, was legit. Some of the intermediate emails were pretty innocuous.
- handsclean 3y ago
  That’s just impersonation, framing is when it’s about how you make the real party look, not yourself. Which would be weird, not implausible, but you get to implausible when you assert not just that somebody framed you, but that you were framed by some specific trusted party like the police or Google, and also you have zero evidence.
matthewdgreen 3y ago
People fake emails all the time: see examples in this comment thread. Literally all it takes is a text editor. This is not the same thing as a criminal frame job, where someone is going to put your fingerprints on a knife at a bloody crime scene.