4 ms·

Curious if this takes the same pains with anonymity as Secret itself, where identities and post associations are, supposedly, opaque even to individual founders

Curious if this takes the same pains with anonymity as Secret itself, where identities and post associations are, supposedly, opaque even to individual founders - it takes at least two to reveal the identity behind a post, and only reveals it for a single post.

marco1 12y ago
I've made this open-source so that anybody can check for security weaknesses and report/fix them. And, of course, nobody has to use the app that is already live on Google Play, but you are free to host your own version.
- sarciszewski 12y ago
  I've taken the liberty of doing just that. :D
drdaeman 12y ago
Didn't we learned it the hard way we can't trust anyone's claims about their services, unless it's really verifiable? There are loads of services who claim one thing, but that's either completely untrue or somehow true but filled with "if"s and "but"s. Say, Dropbox had claimed they do encrypt everything in a manner they don't have any way to access to user data, but it occurred they had just lied. Or, Secret claims they don't send phone numbers and email addresses and says nothing about names but from reverse engineering their app I found out they do for whatever reason send contact names - which, for many Google/Gmail contacts, are the same as email address - and if you use "invite" function they do send unmangled number/address (the latter's reasonable, but still it's an exception from the claim and users aren't really warned about it).
- marco1 12y ago
  Exactly, this is why I hope this app can prove beneficial and I hope that any weaknesses are found by people checking the code. And, of course, the possible risk factors "lies" and "hidden practices" are off the table for this app. Not to forget: Services that are valued at $100M need to find a proper business model. True anonymity/pseudonymity prevents you from pursuing ideas for potential business models in many cases.

marco1 12y ago

I've made this open-source so that anybody can check for security weaknesses and report/fix them. And, of course, nobody has to use the app that is already live on Google Play, but you are free to host your own version.

sarciszewski 12y ago
I've taken the liberty of doing just that. :D

drdaeman 12y ago

Didn't we learned it the hard way we can't trust anyone's claims about their services, unless it's really verifiable? There are loads of services who claim one thing, but that's either completely untrue or somehow true but filled with "if"s and "but"s. Say, Dropbox had claimed they do encrypt everything in a manner they don't have any way to access to user data, but it occurred they had just lied. Or, Secret claims they don't send phone numbers and email addresses and says nothing about names but from reverse engineering their app I found out they do for whatever reason send contact names - which, for many Google/Gmail contacts, are the same as email address - and if you use "invite" function they do send unmangled number/address (the latter's reasonable, but still it's an exception from the claim and users aren't really warned about it).

marco1 12y ago
Exactly, this is why I hope this app can prove beneficial and I hope that any weaknesses are found by people checking the code. And, of course, the possible risk factors "lies" and "hidden practices" are off the table for this app. Not to forget: Services that are valued at $100M need to find a proper business model. True anonymity/pseudonymity prevents you from pursuing ideas for potential business models in many cases.