Viewing profile — moxie

A lot has changed since 2014, and this might actually be possible now. It could be tough to do this right and figure out what to do with the edge cases like importing a WA conversa…

Yeah, bummer. There were some iOS 14 changes that made this stop working as reliably, which was unfortunately right around the time people were getting new devices. It should be be…

They store your social graph in plaintext on their servers.

> Still stupid, shouldn't they ask if I want that functionality? It's kind of a difficult thing to ask. "Do you want this app to work like every other app in the world in the ways …

Right now if you re-install Signal on your device, you lose all your messages. That's already a very bad user experience, but imagine how much worse it would be if you lost your en…

FWIW, there are a couple of things about Apple's and Google's systems that don't work for Signal: 1. There is no meaningful remote attestation. There's no way to verify that there …

> As for Lyme disease: The actual infection can be treated with a standard course of antibiotics. The infection does not persist indefinitely, although some people experience long-…

> "Also the end of the story mentions there are no obvious monuments to the people who worked to help rescue people but there is one in the very city he was reporting from dedicate…

"Only 1400 kilograms of uranium and graphite mixture would have needed to hit the water to set off a new explosion. Our experts studied the possibility and concluded that the explo…

I think there's a lot of uncertainty in talking about Chernobyl, since most of the information published by the Soviet authorities was intentionally incorrect or misleading, design…

Here's how WhatsApp group messaging works: membership is maintained by the server. Clients of a group retrieve membership from the server, and clients encrypt all messages they sen…

> That defense, which happens to be the only defense, is turned off by default in WhatsApp. > You seem to argue they do so because it's bad UX to present such notification by defau…

> This allows WhatsApp to MITM. Whatapps can rekey both Alice and Bob, decrypt both their messages from that point onwards (incl unsent messages) and forward them re-encrypted with…

"Various activist groups" setup their own SMS service? If all you want is for a few hundred people to be able to communicate, you don't need a federated protocol, you just need a V…

> Secondly it's not possible because their is not a finish list of providers. By the way 1) everybody should-could be its own provider 2) everybody must use its own domain name DNS…

Can you provide specific historical examples where censorship of federated protocols was difficult or impossible for technical reasons ? I can't see how there is anything technical…

> With XMPP and federated messaging servers they would have at least working infrastructure within their country. Why do you think this is true? I can't see how federation is an an…

> Reading through the comments that are linked it looks like you mostly had technical concerns about the work. Is that correct? > Clearly the perception of your actions is differen…

> But "their own needs" are completely out of bounds for you, and it seems pretty clear that this isn't something that's going to be fixed in patches and code, so expecting them to…

I'm repeating myself on many of these points, so I've cut and pasted some of my previous responses: > Signal uses servers controlled by OWS. Other organizations could conceivably o…

> Say I run the server under my control, and I talk to other people on and off my server via XMPP. What is occuring is my laptop, phone & tablet are connecting back to my XMPP serv…

Hmm, I'm not sure where you got these numbers, but none of them are correct. Ten hours of downtime a month ? We measure this pretty obsessively, and haven't had that much downtime …

The code in question is written in Java, so the type of memory corruption vulnerabilities you're thinking about are not a possibility: https://github.com/WhisperSystems/Signal-Andr…

I think these types of posts are also the inevitable result of people overestimating our organizational capacity based on whatever limited success Signal and Signal Protocol have h…

Wire does not use Signal Protocol, they used some of our code to create a protocol of their own devising that we do not recommend.