Warning to all OS X users: The Keybase Chat desktop app does a number of shady things that ultimately led me to delete it from my system. I am writing this purely as a public service announcement, to those who worry about installing unknown apps on their Macs. The Keybase Chat app: (1) Requires administrator privileges to launch on first run, to install a "Helper Tool". The app does not explain what this tool does, w…
I'm not qualified or interested enough to investigate this but I can tell you that on Windows Trend Micro have blocked keybase as potential malware. It's reported on github and keybase have requested an exception but reading your post one starts to wonder why Trend Micro would get that idea.
Introducing Keybase Chat
161–170 of 201 posts
Re: Introducing Keybase Chat
#162Re: Introducing Keybase Chat
#163Re: Introducing Keybase Chat
#164Re: Introducing Keybase Chat
#165OP here! I had to trim the post down for brevity, but I thought the HN community in particular might be interested in the API side of things. Undocumented in the post: you can invent channels for app-to-app communication from the JSON API. For example, it's possible with Keybase chat to have a program posting encrypted messages for another person or program, without cluttering up the visual chat interface. Also - to…
Re: Introducing Keybase Chat
#166I disagree with the idea of allowing backup/restore of conversations defeats forward secrecy. There's a big difference between decrypting past conversations and decrypting chat logs. I have full control over my chat logs, I can choose to delete them, not store them with some people, encrypt them with a different password and rotate them monthly, etc. Even Signal and other apps store all your messages on your device,…
I said the same thing! https://news.ycombinator.com/item?id=13605810 Worst case, make PFS without sync the default, but include a native feature for pasting into a shared document (Etherpad style, hosted by Keybase) for whatever your want to keep. Then you've got two spaces with different expectations, matching their capabilities. And for attached files, they'd be displayed in a list while the chat is active, asking…
There's no technical solution to copying and pasting the conversation - try as you may, someone can always get a hook in there and dump the raw text out. Any technical measure you take against this is just as effective as DRM - a total half measure, vulnerable to everything from reverse engineering to the analog hole. The only solution is a social one.
Re: Introducing Keybase Chat
#167This is the last time I spam a Keybase thread with invite codes :) https://keybase.io/inv/6953921e2f https://keybase.io/inv/637bfd5d42 https://keybase.io/inv/20be67f672
Re: Introducing Keybase Chat
#168Umm has anyone read the lisc. for this application? https://keybase.io/docs/terms When providing Keybase or the Service with content, such as your name, username, photos, social media names, data or files, or causing content to be posted, stored or transmitted using or through the Service (“Your Content”), including but not limited to the Registration Data and any other personal identification information that you pr…
Does this mean that you are giving them the right to use any data transmitted through the service? Including your own personal messages?
Even if it did mean that, it would be of 0 use to them because they are fully end-to-end encrypted
Re: Introducing Keybase Chat
#169Why does the page have 112px of top padding? Seems like a waste of space. body { overflow-x: hidden; padding: 112px 0 50px; }
Re: Introducing Keybase Chat
#170Warning to all OS X users: The Keybase Chat desktop app does a number of shady things that ultimately led me to delete it from my system. I am writing this purely as a public service announcement, to those who worry about installing unknown apps on their Macs. The Keybase Chat app: (1) Requires administrator privileges to launch on first run, to install a "Helper Tool". The app does not explain what this tool does, w…