Discord is rolling out end-to-end encryption,
Do you trust it?
Before you rush to say no,
It's designed and audited by the same auditors that SimpleX uses (Trail of Bits)
So do you trust Trail of Bits to say SimpleX is secure, but not design Discord's encryption?
You know I actually wrote Trail of Bits to ask on pricing to audit my own app (which isn't a messenger btw). They use Gmail, so I used PGP.
The guy at Trail of Bits apologized that he didn't have his PGP key anymore, since he never gets encrypted emails. Aren't you guys supposed to be receiving code to audit or emergency 0-day flaws? That's going naked over Gmail? So he directed me to a web browser app that had third party Google JavaScript and claimed it was end-to-end encrypted. This might be true, but he has no idea what that JavaScript was doing.
So without even looking at the details of Discord's new thing, I can tell you they don't give a rat's ass about privacy. All this is doing is trying to remove legal liability in a post Telegram-legal world. But we can remove legal liability for them, by not using Discord.
Source: https://discord.com/blog/meet-dave-e2ee-for-audio-video nostrue.com
ReplyGuy on wss://nostrue.com /
npub1wp…znzhk
2024-09-18 15:40:56
in reply to nevent1q…5tfp
Author Public Key
npub1wpzx4qvwtrze9vqrryutc9lftuj2u84vlrq53a4df049mmn4szfq8znzhkPublished at
2024-09-18 15:40:56Event JSON
{
"id": "ecf86ce2443c13b27db72aa7844713243f352f13410f24e3e1572550e694caea",
"pubkey": "70446a818e58c592b0031938bc17e95f24ae1eacf8c148f6ad4bea5dee758092",
"created_at": 1726674056,
"kind": 1,
"tags": [
[
"e",
"5ff8c7be1835a7034eccfc6010cd339e8c0b6d92fe1d03f5a4ec8d8afa8bdf07",
"wss://nostrue.com",
"root",
"ac3f6afe17593f61810513dac9a1e544e87b9ce91b27d37b88ec58fbaa9014aa"
],
[
"p",
"ac3f6afe17593f61810513dac9a1e544e87b9ce91b27d37b88ec58fbaa9014aa"
]
],
"content": "Discord is rolling out end-to-end encryption,\n\nDo you trust it?\n\nBefore you rush to say no,\nIt's designed and audited by the same auditors that SimpleX uses (Trail of Bits)\n\nSo do you trust Trail of Bits to say SimpleX is secure, but not design Discord's encryption?\n\nYou know I actually wrote Trail of Bits to ask on pricing to audit my own app (which isn't a messenger btw). They use Gmail, so I used PGP.\n\nThe guy at Trail of Bits apologized that he didn't have his PGP key anymore, since he never gets encrypted emails. Aren't you guys supposed to be receiving code to audit or emergency 0-day flaws? That's going naked over Gmail? So he directed me to a web browser app that had third party Google JavaScript and claimed it was end-to-end encrypted. This might be true, but he has no idea what that JavaScript was doing.\n\nSo without even looking at the details of Discord's new thing, I can tell you they don't give a rat's ass about privacy. All this is doing is trying to remove legal liability in a post Telegram-legal world. But we can remove legal liability for them, by not using Discord.\n\nSource: https://discord.com/blog/meet-dave-e2ee-for-audio-video nostrue.com",
"sig": "30ec69e0ebd17bb7bd650751995c51e0d010e4d13b699c67ee5194e02a73be5f744f24b3ca7604f98ec5d7f243acf91ae8343566dfbbc0b7aaf1c9bb5be5512d"
}