Hacker News

There is no such thing as "fines by FISA court". FISA doesn't hear adversarial cases and doesn't have statutory authority or even subject matter jurisdiction to enforce compliance on private actors. FISA is an authorizer for other government bodies, who then use ordinary Article III courts to enforce compliance. Other than the fact that they're staffed by Article III judges and not directly overseen by Article III courts, the FISA court functions like a magistrate court, not a normal court. So: I immediately distrust the source.

People are going to come back and say "well yeah that's just what they tell you about FISA court, but I bet FISA courts fine people all the time", but no, it's deeper than that: private actors aren't parties to FISA cases. It's best to think of them as exclusively resolving conflicts between government bodies.

The part nobody mentions about Crypto AG:

https://inteltoday.org/2020/02/15/crypto-ag-was-boris-hageli...

We've always done this.

On PC? What do you mean?

Plus, one of the simplest forms of cryptography is a basic SHA, so the words is practically meaningless without more details

Bitcoin is great for prospecting, laundering money across borders, and scamming gullible people. It's also easier to hide a stash of stolen bitcoins from the authorities for after you get released from jail than it is to hide a stash of actual money. Bitcoin is certainly no alternative to actual money but it's not entirely useless.

I think these Twitter DMs only does the scamming the gullible part, as you need to pay to use the feature and this is scamming people into thinking they're paying for secure messaging.

Its all out in the public....

> but technically I think it's signature algorithm (ecdsa) can be thought of as a hashing step, followed by a public-key based encryption step.

It really can't. If you're extremely drunk you can think of it as similar to hashing followed by a public-key based decryption step (signing uses the private key, as does decryption) but that's about as good an analogy as calling a tractor-trailer a container ship because both haul cargo. The actual elliptic-curve part of the operation isn't encryption or decryption, and thinking of it as such will lead to error.

RSA does have a simpler correspondence in that the fundamental modular multiplication operation is shared between decryption and signing (or between encryption and verification). But modular multiplication alone isn't secure, it's the "padding" that turns modular multiplication with a particularly-chosen modulus from some basic math into a secure encryption/signature system. And the padding differs, and the correspondence doesn't hold in real systems. RSA without padding is just sparkling multiplication.

I was going to point out that Bitcoin does not use encryption

Yeah Musk as not very technical person would hardly know the difference.

Bitcoin does use encryption for messaging, but I don't know if this is what Musk was referencing: https://bitcoinops.org/en/topics/v2-p2p-transport/

The top comment is written by the person who wrote the blog post this thread is discussing.

Username matches the current URL

ALL roaming SIMs aren't restricted unless the home telecom company cooperates. The roaming traffic passes over a global MPLS network to the home mobile network, so it's not restricted by the national firewalls.

[dead]

Gold plating electrical contacts does at least do something useful though, it helps to prevent oxidization/corrosion. A better analogy would be gold plated TOSLINK cables, which unfortunately do exist.

I can tell you're no connoisseur. Gold-plating a digital connector like HDMI makes sure the zeros are really round and the ones are really pointy. If you have the right setup you can definitely tell the difference.

For me it feels like that after sending messages over 5 years, you need 1TB storage just for the Twitter app.

I’m not sure you appreciate how large that data structure would be if you had to ship it inside the app.

We pretty much know this can't be practically done in a distributed way. Even the public federated stores for gpg keys have been flooded so much they stopped being usable.

No, they would have to show an established market in commerce in ONE market that X is infringing.

> I'll respect their name change once Elon respects his daughter

What exactly prevents them from doing a Windows build with an non-published change, signing it with the keys they control, and pushing it to an individual client through the upgrade servers which they control?

There is a window of vulnerability between a theoretically malicious update being pushed and the security community noticing that it doesn't correspond to a build of the published source. That might only be a few hours, or even minutes - but milliseconds would be enough to do most of its work.

How easy would it be for them to ship a backdoor on iOS? With Apple's DRM it should be difficult to decrypt the IPA and compare it to the source code.

> It is virtually impossible for them to ship a backdoor [..] without the security community noticing.

OpenSSH was trivially backdoor'd [1] and distributed in several major distributions and the security community _did not_ notice until after it was already wild.

[1] https://www.ssh.com/blog/a-recap-of-the-openssh-and-xz-liblz...

Looks like the build is even reproducible. That makes me trust Signal even more.

https://github.com/signalapp/Signal-Android/blob/main/reprod...

It will always remain Comcast to me. Fixing your public image requires correcting your wrongdoing, not changing your name.

Semi-related, parking your company name on widely used words in the dictionary like “Apple” and “Meta” really irks me.

Let’s just start some companies with the names:

- Let’s - Just - Start

You get the idea…

Sorry, but I use a search engine where I can specify "site:x.com" for example, or better yet, "site:m.xkcd.com", and it shows me exclusively results on that site’s domain, rather than clumsily trying to pretend with a content keyword.

X.com is distinctive and unambiguous. Wikipedia has entertained at least 12 proposals to change the article name; 100% of them have failed, and they are issuing 3-month moratoriums on discussion now.

Honestly the new name is a bit of a prank on porn addicts. If someone is watching over your shoulder while you try to type "x.com" into the URL bar, autocomplete may reveal how many other sites begin with "x" that you’ve visited lately.

It's still running fine for me with actual interesting content. I don't get this take, feels like only people who don't use it at all (anymore) say it's been a bad transition or "X sucks now" but they're not using it.

It's still just Twitter, but you're not being banned anymore. So ACTUAL discussions can take place without having the thought police running around with a banhammer.

I am by no means a bluesky person. I hate Twitter and all its clone sites, because I think they're tearing apart the social fabric by training people to interact in bite-sized hot takes in a cycle of outrage. I will still call it Twitter until the end of time, because I refuse to respect corporate rebrands. Whether it's Twitter, Facebook, Comcast, or anything else, I'm not going to play along with their silly name games.

People should call it by its name. Using an old name that no longer describes it is confusing.

> even now with all the AI integration and the screen recording happening in Windows

What!

> Onscreen keyboards and device notification systems also offer other areas that can leak what you type.

The keyboard one is really pervasive.

That’s not true. Skepticism is good and welcome. Random allegations like “it has a backdoor” are not.

If someone has demonstrable evidence that Signal is compromised, I’d delete it immediately. Until then it’s just unwarranted speculation, seemingly intended to make people “both sides” it and switch to something more popular and less secure.

So you are saying that it’s not possible for someone who grew up around slavery and benefiting for apartheid to have racist ideology?

It's very relevant. The intersection of: providing a platform with "encrypted communication" used world wide, vindictive behaviour, and Nazi leaning - it may result in some people who assume their private chats are protected being thrown under the bus in the future. The world is political and it matters.

His support for far right parties in Germany and in the United States. I'm sure it's just a coincidence, though.

Oh really, then show me a video of someone specifically raising, in a very straight fashion, the right arm and hand at a fast speed. The straightness and speed is important. No a simple salute made with the right arm just does not look the same. You know it, I know it, Elon Musk knowns it. Let's not pretend he did not explicitly made a fascist salute.

Yes people forget but Elon was defending white supremacists on Twitter well before he owned the company.