3 ms·

The keys got wiped for way spookier reasons than Micay wanting money. Intelligence wanted in, and Donaldson seemingly would have been happy to oblige.

• Avamander 6mo ago
  [flagged]
  • DANmode 6mo ago
    From the story you’re commenting on: > From Wired: > We understand that Daniel's recollection was not that James wanted to know more information about how the signing keys were stored, but that he wanted direct access to them. > Did you suspect his request was tied to a deal he was brokering with a large defense contractor? Did you believe this would put the entirety of CopperheadOS’ user base at risk? > Yes and yes.
    • Avamander 6mo ago
      [flagged]
      • lostmsu 6mo ago
        From a security-minded user perspective it makes sense to destroy keys when instead of a single entity I receive updates from I get another entity that is not equivalent, and half of my previous entity thinks that the other half is sus.
        • Avamander 6mo ago
          [flagged]
          • HybridStatAnim8 6mo ago
            It wasnt intelligence agency compromise, it was a business partner compromise, who intended to violate the privacy and security of their users. Nothing about this is done out of spite. Im not sure where youre getting that from. You just seem to be attacking peoples character for making the right choice given the circumstances.
            • Avamander 6mo ago
              [flagged]
      • HybridStatAnim8 6mo ago
        They were compromised. Greed overtook the principles on which the project was founded and put the project at risk. They agreed from the start that Micay would own the project and hold the keys. They explicitly accepted those terms. Despite this, they tried a hostile takeover anyway. Forking and building a separate build isnt dual signing, its just forking. You can do that right now with GrapheneOS and its build guide if you want. Im not sure what you mean by the last part, GrapheneOS has been quite upfront with all of this from the start.
        • Avamander 6mo ago
          [flagged]
• next_xibalba 6mo ago
  What is your source for this?
  • DANmode 6mo ago
    TFA. Reddit and IRC/etc logs from the period are illuminating, too.