Live data from Hacker News

Moxie Marlinspike has a plan to reclaim our privacy

newyorker.com

91–100 of 237 posts

Re: Moxie Marlinspike has a plan to reclaim our privacy

#91
post #76

Weird typos(?) in the article: coördinate, coöperate. Seemingly other sloppy typos like "Signal could only proffer the relevant". No critique against the substance of the article though, seems great so far, love Moxie. Edit: And the date in the URL is October 26.

The New Yorker's house style is to use a dieresis to indicate when adjacent vowels do not form a diphthong. There's a syllable-break in between the Os of "coöperate", as opposed to between the Os of "chicken coop", so it gets a special marker. See https://en.wikipedia.org/wiki/Diaeresis_%28diacritic%29#Engl... "proffer" is also a perfectly legitimate word: https://www.merriam-webster.com/dictionary/proffer

While being a non-native speaker I still consider myself to have a high grade of English knowledge and I knew about neither of these. Thank you!

Re: Moxie Marlinspike has a plan to reclaim our privacy

#92
post #76

Weird typos(?) in the article: coördinate, coöperate. Seemingly other sloppy typos like "Signal could only proffer the relevant". No critique against the substance of the article though, seems great so far, love Moxie. Edit: And the date in the URL is October 26.

The diereses over the o (or any doubled letter) is an old-fashioned way of indicating a syllable break, rather than a longer vowel sound (as in “good”). It’s the New Yorker’s house style. Also, I don’t see any spelling mistakes in the sentence you mention...

I stand corrected!

Re: Moxie Marlinspike has a plan to reclaim our privacy

#93
post #72

Earlier quoted context omitted.

>Like the key agility that makes the Axolotl Ratchet so superior to GPG, I am not sure how you can usefully compare a thing originally intended to secure email to a thing intended to secure IM. The ratchet only provides forward secrecy anyway. My take on that is that it is a pointless thing for something like email and pointless in practice for most IM applications. Most IM users keep their old messages and practical…

It provides forward secrecy and deniability. Your chat database doesn't prove that I said what your database says I said.

For that to have any hope of working, you need easily available tools that can fake a chat database. Currently, I'm not aware of any such tools, and I'm not even sure that you can import a faked chat log into Signal on Apple iOS.

In court none of that is likely to hold up anyway, as evidence like chat databases is pretty much assumed to be true until proven otherwise.

Re: Moxie Marlinspike has a plan to reclaim our privacy

#95
post #64
post #35

Earlier quoted context omitted.

Signal is OSS and you can start your own fork & network if you want to. App publishing platforms not having a good binary signature verification system is the orthogonal issue that you're bringing up, that would in many ways apply to matrix for most users too. Most will never bother to sideload it.

Signal disallows federation from forks (it has been attempted). "Using signal" requires using the official build, and that requires closed-source libraries and services (e.g. Google Play Services).

Signal doesn't require Google Play Services. It will use Play Services if installed for notifications, but works fine without them, and it can be installed on LineageOS etc.

Re: Moxie Marlinspike has a plan to reclaim our privacy

#97
post #12
post #9

Why is it, whenever Signal is brought up on Hacker News, we get inundated with the people who object to the core decisions of the Signal Project? Would Signal really be better if, instead of having a secure messenger available to the masses, it spent massive amounts of time implementing the things these people want? No. I would be comfortable recommending Signal (or WhatsApp) to a nontechnical friend and communicatin…

A great deal of human communication is dedicated to signalling high rank/superiority, or demonstrating familiarity/intimacy.[1] In the case of HN, very few people know much about Moxie, so the only useful signal they can convey is expertise. Many people come here because of their technical or product development background/interests, and the way they show expertise is by second-guessing technical, user interface, and…

He's got a master mariners license, which to me is way more cool than any of the computer stuff. Legally captain a merchant ship of any size, of any type, operating anywhere in the world.

Re: Moxie Marlinspike has a plan to reclaim our privacy

#98
post #94

Requiring a mobile phone number to use Signal is a NOGO.

You can use a voip number that forwards sms (ex: voip.ms). You don't need to setup VoIP, just setup SMS forwarding to email.

That's what I did initially for my kid on an android tablet, and always did for my data-only phone.

Re: Moxie Marlinspike has a plan to reclaim our privacy

#99

Earlier quoted context omitted.

If you're really paranoid, you'd convince your contacts to use your fork.

I can't even convince my contacts to use signal.

My approach is to use Signal for organizing surprise birthday parties. (or at least I did before the world went to shit.) "We need SUPER SECURITY to make sure Rob doesn't find out what's up! So we're all using Signal to plan... Join up!"

Re: Moxie Marlinspike has a plan to reclaim our privacy

#100
post #13
post #3

Earlier quoted context omitted.

These are all exact reasons I have never used Signal. Additionally I find concerning the choice to bet the farm on SGX which has been repeatedly broken with repeated opportunities to extract the keys, at which point cracking small numeric pins is trivial. Moxie simply promised they always patch right away and never take the keys when they have such opportunities to do so. I do believe him, today, but I don't believe…

You can't coherently be alarmed by Signal's use of SGX while at the same time endorsing systems that use no cryptography whatsoever to protect the metadata Signal uses SGX for.

You can be alarmed by and critical of Signal's insistence that it begin storing your data under any scheme without an option of "hey, just don't store my data, thanks".
Post reply on HN