Live data from Hacker News

X's new "encrypted" XChat feature doesn't seem to be any more secure

theregister.com

21–30 of 86 posts

Re: X's new "encrypted" XChat feature doesn't seem to be any more secure

#23
post #4
post #2

In a nutshell: we have unclear comments from Musk and unclear statements in the FAQ (which might not have been written by a technical person). Until they release a technical white paper, we don’t know anything for sure.

Sure we know that we should not trust anything Musk or X claims? By now? I mean, come on.

Some things Musk claimed have happened, others have not. For example, he promised that they would release a satellite Internet platform that was better than most of the others, and they did.

On the other hand, he promised that Grok 3 would be massively better than ChatGPT, and it turned out to be comparable at best.

Re: X's new "encrypted" XChat feature doesn't seem to be any more secure

#24
post #8

> Currently, we do not offer protections against man-in-the-middle attacks. As a result, if someone—a malicious insider or X itself as a result of a compulsory legal process—were to compromise an encrypted conversation I assume this means that the "encryption" is about as strong as base64.

I bet they're using WebSocket over HTTPS and calling that "encrypted chat" because it technically is.

hey, I literally doing this right now, what's wrong with that??

I mean its just for notification to my app so its not something critical

Re: X's new "encrypted" XChat feature doesn't seem to be any more secure

#26
post #19

It seems to me like this is what happens when you do impulsive, hype-driven development. I assume a junior walked into Elon's office, and pitched it with the words "Bitcoin style encryption, as a chat platform--Written in Rust, almost entirely developed my Grok3", and he was sold. I'm not being cynical or funny, I legitimately think, after having worked with some hype-driven leadership people, that this is quite comm…

Basically, The Emperor’s New Clothes[0].

[0] https://wikipedia.org/wiki/The_Emperor%27s_New_Clothes

Re: X's new "encrypted" XChat feature doesn't seem to be any more secure

#27
post #6
post #2

In a nutshell: we have unclear comments from Musk and unclear statements in the FAQ (which might not have been written by a technical person). Until they release a technical white paper, we don’t know anything for sure.

The first time I heard about this "XChat" was through a screenshot of Musk's tweet where he said it has "bitcoin style" encryption. Honestly, it was obvious just from reading that, that Musk has absolutely no idea what he's talking about when it comes to cryptography, and that nobody he has talked to on the development team has any clue either. That doesn't mean that we know for sure that the team doesn't have crypto…

You think Elon Musk doesn’t know what he’s talking about? Sorry, you might disagree with his politics, but the assertion that he doesn’t know what he’s talking about it absurd.

Re: X's new "encrypted" XChat feature doesn't seem to be any more secure

#28
post #12

Earlier quoted context omitted.

Well, in Musk's defense, he promised Bitcoin-style encryption and it does indeed appear to be as much encrypted as Bitcoin is.

well, in Musk's defence he's been selling BS to people for the better part of the last three decades and people are still giving him money, so...

Those rockets, the ones that went into space, are those BS? Starlink works. Tesla’s were the most desirable electric car until politics came into it. And PayPal? Literally changed the internet.

Re: X's new "encrypted" XChat feature doesn't seem to be any more secure

#29
post #6
post #2

In a nutshell: we have unclear comments from Musk and unclear statements in the FAQ (which might not have been written by a technical person). Until they release a technical white paper, we don’t know anything for sure.

The first time I heard about this "XChat" was through a screenshot of Musk's tweet where he said it has "bitcoin style" encryption. Honestly, it was obvious just from reading that, that Musk has absolutely no idea what he's talking about when it comes to cryptography, and that nobody he has talked to on the development team has any clue either. That doesn't mean that we know for sure that the team doesn't have crypto…

It sounds like an offhand comment that we shouldn’t read much into.

Bitcoin’s creator demonstrated an impressive mastery of cryptography—- it was made to be extremely resilient (including to quantum computing) and no one has ever broken it despite billions of dollars being on the line. Maybe Musk meant to say that he thinks his product will be similarly resilient.

He might also mean that the secp256k1 elliptic curve (which Bitcoin uses) is also used by their product in some way, such as for a key exchange.

You can read anything with the assumption that the writer is an absolute idiot, but I’d give the world’s richest man more credit than that.

Re: X's new "encrypted" XChat feature doesn't seem to be any more secure

#30
post #16
post #2

In a nutshell: we have unclear comments from Musk and unclear statements in the FAQ (which might not have been written by a technical person). Until they release a technical white paper, we don’t know anything for sure.

Sure we do - the client code is already out there.

Has anyone posted an analysis of its security?
Post reply on HN