2026-04-10T01:09:23Z https://yabu.me Matthew Green https://yabu.me/npub14ga56j26f2t92m7vuhl6z5vrave6wsgzkw7hy4qrnspsnqqsxkvq0cwcqv https://files.ioc.exchange/iocexchange/accounts/avatars/108/217/938/319/214/709/original/c3b4855bfdb259a6.jpeg https://files.ioc.exchange/iocexchange/accounts/avatars/108/217/938/319/214/709/original/c3b4855bfdb259a6.jpeg https://yabu.me/nevent1qqsxph2tl29dzaxgx3tmasr4gf2t2dx9hjmmegy6er3qr2cfetfwunszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esf2kmqw In reply to <a href='/nevent1qqsxra6vuq325mfz335w7yfcd3qcltlsraa7unljgs62e7ua4tn47pgaecdn5'>nevent1q…cdn5</a><br/>_________________________<br/><br/>My big concern is that in public spaces you have to throttle or gate people accessing the thing. For broadcast (read) only that doesn’t matter but for writes I guess you’d need permissioning or throttling. 2026-03-25T13:54:12Z https://yabu.me/nevent1qqsxrzrzvy85nv5364r2el723v7e82qg38lxdxswqgp6nc9zl8s8ssgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6escnu9y3 In reply to <a href='/nevent1qqsp4sn5648zvk3zxxvpxsa5qy78hfsygf8q3fyws9u5svs68auy72qngpssk'>nevent1q…pssk</a><br/>_________________________<br/><br/>I’m planning to prototype this next week just for fun, to see if it works. But curious if there have been any experiments in this model or if it’s a bad idea for known reasons. (I know iOS background BLE receiving is very very bad.) 2026-03-24T23:51:52Z https://yabu.me/nevent1qqsp4sn5648zvk3zxxvpxsa5qy78hfsygf8q3fyws9u5svs68auy72qzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esvus5q6 In reply to <a href='/nevent1qqs2yrnst25ejm6chzvtzdsp9tk3nd5tlshgf7ju4e8fzypzau73ylst549hl'>nevent1q…49hl</a><br/>_________________________<br/><br/>All of these projects seem to operate on a 1:1 PC/radio model. I think a better design would move the client logic to a PC/smartphone, but each radio device could support many clients — each with their own public key/identity. You’d have to use BLE advertisements to support many clients per radio. 2026-03-24T23:50:47Z https://yabu.me/nevent1qqsdffpnqwlpxrlhr42qcs4pklpmcy7t690m3zz6fvua6wfxwmzlehqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esl4uw9w In reply to <a href='/nevent1qqs2lc4j5ylclns92uwlm04f3qchvp57jjy76rt3nlmul8zcgmxqprquz5pp2'>nevent1q…5pp2</a><br/>_________________________<br/><br/>Boston. #meshcore<br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://files.ioc.exchange/iocexchange/media_attachments/files/116/286/823/405/963/232/original/4cab56a78ee1b267.mp4"></video><br/> 2026-03-24T23:48:39Z https://yabu.me/nevent1qqsf29phwycfuxapr33fa05adtq0g6rxshztw8vg2v32nt84hdezw2czyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esj8usun In reply to <a href='/nevent1qqswy0d2ggg6wpj64qxa74yqavn4w2ke93x6rt7j0d3n74zvsy72w0s225haa'>nevent1q…5haa</a><br/>_________________________<br/><br/>I’m planning to code this up next week. 2026-03-24T23:47:18Z https://yabu.me/nevent1qqswy0d2ggg6wpj64qxa74yqavn4w2ke93x6rt7j0d3n74zvsy72w0szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es2ghqu7 In reply to <a href='/nevent1qqsvgudqxxhv0q5g87rsc9d2jcgtal9pcxkrxuq8f52g5pwthhxz9zs49p0qf'>nevent1q…p0qf</a><br/>_________________________<br/><br/>oh never mind, I understand what you’re saying. What I want is that but bigger: I want a single radio to be able to support 100 simultaneous smartphone clients via BLE advertisements. For protests and natural disasters. 2026-03-24T23:46:55Z https://yabu.me/nevent1qqsvgudqxxhv0q5g87rsc9d2jcgtal9pcxkrxuq8f52g5pwthhxz9zszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esmjj97z In reply to <a href='/nevent1qqswegvlc4vxzad0ss3nqtzyr4ldp8v76nj75s0q5l9l9zj2h0sr09saewsfg'>nevent1q…wsfg</a><br/>_________________________<br/><br/>I think that’s basically what this does. It’s a real MeshCore node with all the radio layers turned into stdio ports. A better design would define this explicitly as a HAL. 2026-03-24T23:43:59Z https://yabu.me/nevent1qqs2lc4j5ylclns92uwlm04f3qchvp57jjy76rt3nlmul8zcgmxqprqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6escz8rsu In reply to <a href='/nevent1qqsts3an9ajl6xnspynl5mev9qfflyaptqpag2advr3vvhxfvyh7sfg6qzlw5'>nevent1q…zlw5</a><br/>_________________________<br/><br/>Right now it handles simulations that involve collisions, delays and other common events (in a very simple model). Each node is a simplified Meshcore node running as a process. #meshcore 2026-03-23T18:19:52Z https://yabu.me/nevent1qqsts3an9ajl6xnspynl5mev9qfflyaptqpag2advr3vvhxfvyh7sfgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es6qsyzv In reply to <a href='/nevent1qqsd6qwmzwqqxyx8myn3vww5yva3r4zd3jx4qgef0r25jtnpc4p87gqfdn2j6'>nevent1q…n2j6</a><br/>_________________________<br/><br/>Just to give some visuals. #meshcore<br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://files.ioc.exchange/iocexchange/media_attachments/files/116/279/863/631/130/422/original/5d3c45beba42e013.mp4"></video><br/> 2026-03-23T18:18:44Z https://yabu.me/nevent1qqsd6qwmzwqqxyx8myn3vww5yva3r4zd3jx4qgef0r25jtnpc4p87gqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eslkgy4n I’ve been working on a little simulator for MeshCore, written entirely using Claude Code. I was hoping some MeshCore devs might take a look and let me know if there are features they could use. #meshcore 2026-03-23T18:17:15Z https://yabu.me/nevent1qqsp8y8gde855kyc3xcrgzfyr82su7nd6zuxrreskdlmsl4lvfehafszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esys4m9v Microsoft is handing over Bitlocker keys to law enforcement. <a href="https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/">https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/</a> 2026-01-23T13:59:23Z https://yabu.me/nevent1qqsgduggnefxtl7mtgpt4pmkf5mwraervnqjg3lrlxhr42hzfakj3sgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es5f3ycu I was stupid enough to buy this new AppleCare One plan for a phone I bought my daughter. Now I learn this only covers the device if it’s connected to the same Apple ID (not family plan). Have to spend Christmas unwinding this and getting a refund, what a drag. 2025-12-25T18:04:22Z https://yabu.me/nevent1qqsqjqng0rl72y4qeacg2h6ul74fus4xapp2rmlhvnq96nkprxd0segzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esvk9qet In reply to <a href='/nevent1qqsrc9u5a9ljfh8l93cyrhhl6lg78afl4mltefe36fnwllf3njnmxggjmu75s'>nevent1q…u75s</a><br/>_________________________<br/><br/>PS I did a search to see if there are any public court documents talking about Private Relay, and the closest I found is one CSAM case involving a defendant who used Private Relay, but was caught due to logging into an Adobe service. <a href="https://insidelake.com/2023/08/11/geek-squad-manager-arrested-on-more-than-30-charges-involving-child-pornography/">https://insidelake.com/2023/08/11/geek-squad-manager-arrested-on-more-than-30-charges-involving-child-pornography/</a> 2025-11-13T14:11:58Z https://yabu.me/nevent1qqsrc9u5a9ljfh8l93cyrhhl6lg78afl4mltefe36fnwllf3njnmxggzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es8w7f6j In reply to <a href='/nevent1qqsf6nz7hz4gw6kpnfu4cyggxy0ylfp22ey3u52ne3p2sqsvnz4nz4cvvlmv9'>nevent1q…lmv9</a><br/>_________________________<br/><br/>I’m fascinated by these services for a reason: this is the first time that major companies have taken a stand on adding IP privacy to their offerings. It’s as big a deal as the rise of end-to-end encryption or TLS, but everyone noticed those things. Nobody is talking about this.<br/><br/>Also, what makes IP hiding services feasible today is the economics of the thing. With peering agreements and the extremely low bandwidth costs big tech cos can access, using 50GB/mo of Private Relay probably costs less than $1 in ingress/egress charges. Apple charges $1-10. 2025-11-13T14:11:18Z https://yabu.me/nevent1qqsf6nz7hz4gw6kpnfu4cyggxy0ylfp22ey3u52ne3p2sqsvnz4nz4czyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esu83tq0 In reply to <a href='/nevent1qqs22ly8mkc8qx7rc223wgte8ws8deh3k6wfhs2p638qydmkmju2mfsmdlc24'>nevent1q…lc24</a><br/>_________________________<br/><br/>Anyway, the current usage for both systems is web browsing (although Google seems to have given up on that.) But companies are also using this to add privacy to their own internal services, presumably things like Find My and (maybe) Siri and Apple’s PCC or Google’s new private ML inference service. <a href="https://blog.google/technology/ai/google-private-ai-compute/">https://blog.google/technology/ai/google-private-ai-compute/</a> 2025-11-13T14:10:18Z https://yabu.me/nevent1qqs084ecwhvkz2tjgawfhuvlv3psrflr06fpw6ps8fjhkjy9u6jm77qzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esahkn69 In reply to <a href='/nevent1qqsgsan42fyv6ykrx4zs2dq2nce96hyncq7a2cvfp4wke8xvq9jkf5s6yy0x8'>nevent1q…y0x8</a><br/>_________________________<br/><br/>That’s what they claim. 2025-11-13T14:01:19Z https://yabu.me/nevent1qqs22ly8mkc8qx7rc223wgte8ws8deh3k6wfhs2p638qydmkmju2mfszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eslfv2n3 In reply to <a href='/nevent1qqsqnqe9alh53ganq74s6cu9meq2xcmflavfjkdp8ccu9zgehyjpw2gdsl33l'>nevent1q…l33l</a><br/>_________________________<br/><br/>It’s not just Apple. Google has their own system in the “Privacy Sandbox” that goes by the (less cool) moniker “IP protection”. (Come on Google, get a better marketing team.) It’s experimental and was linked to Chrome, although they seem to have deprecated that integration (but not the service.) <a href="https://privacysandbox.google.com/protections/ip-protection">https://privacysandbox.google.com/protections/ip-protection</a> 2025-11-13T13:58:29Z https://yabu.me/nevent1qqsy3u6ulm7fxx9zhycvjvwkfsg95l2sgkgedehwls86f7nu65c28hgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esfwpfcl In reply to <a href='/nevent1qqsqnqe9alh53ganq74s6cu9meq2xcmflavfjkdp8ccu9zgehyjpw2gdsl33l'>nevent1q…l33l</a><br/>_________________________<br/><br/>It’s hard to prove that this “two company” solution really provides strong privacy. But it provides enough privacy that Apple’s instructions for Law Enforcement page explicitly warns police that they can’t trace Private Relay addresses.<br/> <img src="https://files.ioc.exchange/media_attachments/files/115/542/737/520/660/482/original/9b29e7f7bf1a5ce6.jpeg"> <br/> 2025-11-13T13:57:43Z https://yabu.me/nevent1qqsqnqe9alh53ganq74s6cu9meq2xcmflavfjkdp8ccu9zgehyjpw2gzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esyez2kf In reply to <a href='/nevent1qqs2p2djksj3q7v60unuve9qqllhknww9ke8kecsq2vzcseq8psqxaqk8sy50'>nevent1q…sy50</a><br/>_________________________<br/><br/>For example, Apple has iCloud Private Relay for Safari browsing. The first “hop” is a server run by Apple itself, so Apple sees IP addresses. But web connections get relayed to a second VPN provider that isn’t Apple: hence Apple can’t link source IPs to destination servers. 2025-11-13T13:57:10Z https://yabu.me/nevent1qqs2p2djksj3q7v60unuve9qqllhknww9ke8kecsq2vzcseq8psqxaqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esfu8lq6 One of the most interesting recent privacy developments is the deployment of big two-hop IP blinding VPNs by companies like Apple and Google. These systems are designed to ensure that even those companies can’t link web requests to IP addresses. 2025-11-13T13:56:46Z https://yabu.me/nevent1qqsvygpft65cygcns9jxkk55y0zmlqenpj405x3m9erspjz05tsrg5szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esqzcvj5 Great article about how TEEs are providing much less security than folks believe they will. <a href="https://arstechnica.com/security/2025/10/new-physical-attacks-are-quickly-diluting-secure-enclave-defenses-from-nvidia-amd-and-intel/">https://arstechnica.com/security/2025/10/new-physical-attacks-are-quickly-diluting-secure-enclave-defenses-from-nvidia-amd-and-intel/</a> 2025-10-29T16:32:08Z https://yabu.me/nevent1qqsg6q46rwjlv4rvf6e6n0nlhfyv2arcl6uzp3mq3va80cd46qvqq7gzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es06564e In reply to <a href='/nevent1qqsdfzqhp5u7d30myd6gqtw8vu2445dpmt8wz38qhv907ykp7tkacssxfvxp7'>nevent1q…vxp7</a><br/>_________________________<br/><br/>People get upset about a lot of things enough that regulators and legislators try to do things about them. Data breaches get a lot of attention, for example. If Google was leaking detailed web histories of all its users, you can bet Congress would be shouting. But Google has been amazingly good at protecting this info from becoming public. 2025-10-16T12:29:34Z https://yabu.me/nevent1qqspfzz57rc38p8qc6yestxzxvzxv6ralxqx6rp5mt7d03upqnsxmqszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esv5uch8 In reply to <a href='/nevent1qqsw3jrjs89734n5tl22jyvudcsdnaaktee3xumlhfgvme3mxen9wrqgfmt0z'>nevent1q…mt0z</a><br/>_________________________<br/><br/>Is a terrible problem that we still can’t get anyone energized about. 2025-10-16T12:27:17Z https://yabu.me/nevent1qqsgjx5etzh5j2hymzh48egp0sx6lnq8p92dg3jwertd0sw654zawsszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es95knea In reply to <a href='/nevent1qqspcegqj7l73h5rlehlrjnxen89ulxwx6teeuhkmyqwqf50ggvy5cq9xufam'>nevent1q…ufam</a><br/>_________________________<br/><br/>Which is kind of the same thing, right? People say stuff like “the microphone must be listening to me because I saw this ad,” and companies say “we don’t listen to your microphone.” And then folks educate themselves, stop living their lives and make adtech behavioral modeling into the most important issue in their political lives. Except mostly they don’t. They just find it creepy and go back to scrolling. 2025-10-16T12:23:21Z https://yabu.me/nevent1qqsfqg5skcl5el9n3rktwv43wy5zw40zn0w9pak0zalmw5mma6uzjjgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esqc7gwp In reply to <a href='/nevent1qqstchclhlamxzvjfqr52hzzz8edtednrt3xgaq28frullapefj0tusmygf5g'>nevent1q…gf5g</a><br/>_________________________<br/><br/>I have concerns too. 2025-10-16T12:14:50Z https://yabu.me/nevent1qqstkfuna96j5r5k89x0r82hnnzjh002vty798yjezhqph2zhwze88szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esveq87t In reply to <a href='/nevent1qqs0qygzyh5yzhu8grcyre3yv3nmpg4snd66efmpdqg4she0l33v9mqqc3xrc'>nevent1q…3xrc</a><br/>_________________________<br/><br/>Try it. Go out and try to convince your non-technical friends that adtech tracking is a weapon in the hands of a malicious government, and convince them to move it high up enough in their priority stack that they displace other concerns to try to stop it. I’ve tried and people nod and tell me how annoying ads are, then they move on. (And frankly, based on past history, they’re being rational and I’m being alarmist.) 2025-10-16T12:13:49Z https://yabu.me/nevent1qqs0qygzyh5yzhu8grcyre3yv3nmpg4snd66efmpdqg4she0l33v9mqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esfteh03 In reply to <a href='/nevent1qqs2rap6fq5dz8zq39ekxjqjk2e5q3khlwzjv03lv5vfy2x9u8d969se0qweh'>nevent1q…qweh</a><br/>_________________________<br/><br/>What I mean here is that drawing a line from ad targeting tech to “1984-style Orwellian behavioral surveillance” is very easy for tech people to do, since the tech exists to do a lot of this. But convincing people that this is a real threat is very hard, because it’s hypothetical and (so far) the ad tech companies have never allowed their data to be used that way. 2025-10-16T12:11:34Z https://yabu.me/nevent1qqswls20f8cu8elm96wy2y6n5f5afmqcg6ecv6uvrxdchrzuywfx0jczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esln9az3 In reply to <a href='/nevent1qqst5vj5jzkjm0ukpcq5t2f6w879fwf9as5thduf7utklq6mwl28e2ssuqq05'>nevent1q…qq05</a><br/>_________________________<br/><br/>We (tech people) understand that this capability is possible if ad targeting tech was repurposed that way, particularly with sophisticated AI. But good luck convincing people that targeted ads are an existential risk to their freedom, rather than an annoyance. 2025-10-16T12:09:39Z https://yabu.me/nevent1qqst5vj5jzkjm0ukpcq5t2f6w879fwf9as5thduf7utklq6mwl28e2szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esjpsvaw In reply to <a href='/nevent1qqsv2z0mua8mn5s6x48yayg65yn8dgvmvgu2h04nvuzh8neldkc0lhgr4kjml'>nevent1q…kjml</a><br/>_________________________<br/><br/>They don’t view ad targeting as an existential risk. They dislike ads. Some people find them creepy. But very few people are worried that the government is going to subpoena Google to convert their ad targeting model into a social credit score or even present that data as evidence in a criminal case. Because (I believe) it’s never happened. 2025-10-16T12:07:45Z https://yabu.me/nevent1qqsq7e5t53ts9u3mqhsctfuhu0h32pn9h42f5fqjhtq4eg96krq50eqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es5lfjnj In reply to <a href='/nevent1qqs2yxme2cjs5twafj0k6y4ay52m85cdms7k8qdmpky5zvwl8wxxrrgc4r2mt'>nevent1q…r2mt</a><br/>_________________________<br/><br/>And right now I’m seeing very little deep thought about this stuff. We’re putting more tech and legislative and policy energy into stablecoins and TikTok than we are into how the entire Internet will work over the next 50 years. That should change! 2025-10-15T15:26:32Z https://yabu.me/nevent1qqs2yxme2cjs5twafj0k6y4ay52m85cdms7k8qdmpky5zvwl8wxxrrgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esm8jsma In reply to <a href='/nevent1qqs2204sgl7wgzrp83er86ccrxu3y03ux3j3qsclgwtvetu857y5vwqeee0vw'>nevent1q…e0vw</a><br/>_________________________<br/><br/>This is the world we’re moving into. It’s one where every online interaction of any small commercial value will be tied to a precise human identity, and that’s the only thing that will make the Internet even remotely usable in the future. Questions of privacy and accountability in that world matter.<br/><br/>We already leak a lot of this data, but critically *relatively little of it has been centralized and exploited* in the ways end-users are afraid of (they pretend to care about ads, but they don’t.) If we’re moving into this new world we need to think hard about tech and policy. 2025-10-15T15:26:22Z https://yabu.me/nevent1qqs2204sgl7wgzrp83er86ccrxu3y03ux3j3qsclgwtvetu857y5vwqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esunjl9l In reply to <a href='/nevent1qqs2w76wkea0sznkufjzgqvt72hkulsde3n2yhfhep0qs6rysxtygvg2ja7u2'>nevent1q…a7u2</a><br/>_________________________<br/><br/>But some of the people working on this tech seem to think that age verification is what this tech is for. I ask a question like “how will you handle [some type of fraud]” and they say “oh that problem doesn’t matter for verifying ages.” And it shocks me.<br/><br/>You’re building the architecture for how humans will interact online for the next several decades, and you don’t understand what task you’re engaged in, and you’re not thinking hard about how to do this privately? You actually think it’s about keeping 15 year olds from seeing salacious TikToks? 2025-10-15T15:25:38Z https://yabu.me/nevent1qqs2w76wkea0sznkufjzgqvt72hkulsde3n2yhfhep0qs6rysxtygvgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eswsnla5 In reply to <a href='/nevent1qqsx8rm4sd2xwl3fz9vw2e90xwy9elvvyq6lqzwwlffntva9ff36unqd4ll6z'>nevent1q…ll6z</a><br/>_________________________<br/><br/>Google recently released a toolkit to enable anonymous credentials and web authentication using zero-knowledge. This will likely be in Android and hopefully Apple will adopt it, which is a good thing! I’m not complaining! This will enable people to prove age privately. <a href="https://blog.google/technology/safety-security/opening-up-zero-knowledge-proof-technology-to-promote-privacy-in-age-assurance/">https://blog.google/technology/safety-security/opening-up-zero-knowledge-proof-technology-to-promote-privacy-in-age-assurance/</a> 2025-10-15T15:25:00Z https://yabu.me/nevent1qqsx8rm4sd2xwl3fz9vw2e90xwy9elvvyq6lqzwwlffntva9ff36unqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esezxlt5 In reply to <a href='/nevent1qqsynx5teyd9fw70sn4zantd37lrcn6kjpe788pgr2v90zxkynwzkaqvp734e'>nevent1q…734e</a><br/>_________________________<br/><br/>Most of that tech stuff is already well under way. Several states already let you bind your driver’s license to your phone, for purposes that are (at present) entirely unconvincing. The interesting “hard” problems are all around privacy and fraud-resistance.<br/> <img src="https://files.ioc.exchange/media_attachments/files/115/378/871/105/750/695/original/5c93fbe260188791.jpeg"> <br/> 2025-10-15T15:24:21Z https://yabu.me/nevent1qqsynx5teyd9fw70sn4zantd37lrcn6kjpe788pgr2v90zxkynwzkaqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es9my2ue In reply to <a href='/nevent1qqs852eqhprj89gvtwfnqu3ng4zkjh6nw4m2twgfnj6cle348af8uxq4s8d8z'>nevent1q…8d8z</a><br/>_________________________<br/><br/>To be really clear: it’s pretty obvious that the central (Internet communication) problem of our time is going to be determining whether the stranger you’re talking to (or delivering ads to) is a person or a bot. And every existing tech we have for doing this will fail.<br/><br/>So how do we do this? Presumably by tightly binding physical identity to your device and then proving possession (with some other bells and whistles). Not coincidentally that’s exactly what age verification is. Weird how corporate and gov’t priorities suddenly align, right? 2025-10-15T15:23:49Z https://yabu.me/nevent1qqs852eqhprj89gvtwfnqu3ng4zkjh6nw4m2twgfnj6cle348af8uxqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esm8wlps The “age verification” and the “human identification” problem are the same problem. It upsets me to be around people who think they’re working on the first, but don’t understand they’re actually working on the second.<br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://files.ioc.exchange/media_attachments/files/115/378/866/559/171/366/original/3fea85c209944528.mp4"></video><br/> 2025-10-15T15:23:11Z https://yabu.me/nevent1qqs9gqptrgxl6gwheqdn3gd6l2dtkpv2hc9r570w973ugvzqx3425kqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6estvw2ul Two great bits of academic attack work this week. The new one allows Android apps to see data displayed on the screen by other apps, including Google Authenticator codes. <a href="https://www.pixnapping.com/">https://www.pixnapping.com/</a> 2025-10-15T10:45:50Z https://yabu.me/nevent1qqsfqzz06aqt3ucjw86tz0pcrrmnwhqn6gh6t9gcmkskq6sy7c2sedgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esj5z8c7 In reply to <a href='/nevent1qqszqsy92k07rta6mwlycelf2rwpsqxvh3lfg7mjzea9qzkpje5yqjg7sv66g'>nevent1q…v66g</a><br/>_________________________<br/><br/>This work really helps to illustrate the role of public and academic security research. Yesterday there were people at satcos who knew these unencrypted links were dangerous, but weren’t empowered to do anything about it. Now they will be. 2025-10-14T11:24:54Z https://yabu.me/nevent1qqsda3ce7el266yqgcyewtatqyx362fd4hqag3h3xh75u2yr70x3mtczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esyw3qfq In reply to <a href='/nevent1qqszqsy92k07rta6mwlycelf2rwpsqxvh3lfg7mjzea9qzkpje5yqjg7sv66g'>nevent1q…v66g</a><br/>_________________________<br/><br/>Some genuinely weird corporate security speak here. These downlinks are broadcasting your WiFi data across the entire northern hemisphere. It is not equivalent to a coffee shop!<br/> <img src="https://files.ioc.exchange/media_attachments/files/115/369/901/118/190/811/original/d53ce36d69feb391.png"> <br/> 2025-10-14T01:23:09Z https://yabu.me/nevent1qqszqsy92k07rta6mwlycelf2rwpsqxvh3lfg7mjzea9qzkpje5yqjgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esjtc0nx In reply to <a href='/nevent1qqsyvxh6fhqqvjz6ug6g9qmluxzwsm39qw67lupgygjjz7fxg0mguhq0mz8fd'>nevent1q…z8fd</a><br/>_________________________<br/><br/>Here’s a good article about it in Wired: <a href="https://www.wired.com/story/satellites-are-leaking-the-worlds-secrets-calls-texts-military-and-corporate-data/">https://www.wired.com/story/satellites-are-leaking-the-worlds-secrets-calls-texts-military-and-corporate-data/</a> 2025-10-14T01:18:08Z https://yabu.me/nevent1qqsyvxh6fhqqvjz6ug6g9qmluxzwsm39qw67lupgygjjz7fxg0mguhqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es5xzw99 This is amazing research by Nadia Heninger and her co-authors Wenyi Morty Zhang, Annie Dai, Keegan Ryan, Dave Levin and Aaron Schulman. TL;DR a huge number of satellite links over our heads are totally unencrypted. satcom.sysnet.ucsd.edu 2025-10-14T01:16:58Z https://yabu.me/nevent1qqsygldunjnmwmd03gmmv8ak6tg6995q3f0ewprru067dt6xhkthqfczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esqgwhl7 In reply to <a href='/nevent1qqs26xas3yzddnl6w4s7j6slkp0nrukr0s55edrnkuss9dk5a8wga2g7wmrym'>nevent1q…mrym</a><br/>_________________________<br/><br/>And from a pure privacy perspective, the problem there is that once you’ve demanded every encrypted app add a scanning component, then changing what you scan for is just a software update to be agreed upon quietly in some committee down the line. 2025-10-10T11:40:41Z https://yabu.me/nevent1qqs26xas3yzddnl6w4s7j6slkp0nrukr0s55edrnkuss9dk5a8wga2gzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eseuddkq In reply to <a href='/nevent1qqsq7ghvtz7qy0u3ehm04csh6frhnqnjfgj56jearwwthtep2f7fpwsvkdmy4'>nevent1q…dmy4</a><br/>_________________________<br/><br/>So what worries me come December is that we see a bunch of “moderated” proposals that preserve this central architectural change, but just use it for slightly less. That’s not going to save anyone. 2025-10-10T11:40:27Z https://yabu.me/nevent1qqsq7ghvtz7qy0u3ehm04csh6frhnqnjfgj56jearwwthtep2f7fpwszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es2l6r0s In reply to <a href='/nevent1qqsfzhqv8tp96tgrvenc56jyzd2f5hdgt0eluadsxj2kggfkjc6h2js8l3ksq'>nevent1q…3ksq</a><br/>_________________________<br/><br/>The problem with this idea is that most “moderated” versions don’t solve the central problem: you’re changing private, encrypted messengers to have a component that scans the plaintext of the message. This is what potential makes your messages vulnerable to theft. 2025-10-10T11:40:06Z https://yabu.me/nevent1qqsfzhqv8tp96tgrvenc56jyzd2f5hdgt0eluadsxj2kggfkjc6h2jszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esysk6rn Germany has agreed to stop ChatControl for now, due to huge amounts of public pressure. Good job! The bad news is that it could come back as soon as December, and the German government has interpreted the feedback as a need to “moderate” the proposal. 2025-10-10T11:39:47Z https://yabu.me/nevent1qqsx3mpmx2erzyulksj2jx3ync73czlm5rv9p8fzmqa3wjdm3es2mkgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esuuj7cq In reply to <a href='/nevent1qqsfhgpmpmx4u86ldnf9mdmxk8q94r2rpxcuk6ksksxrnpxsdztmyychtnw98'>nevent1q…nw98</a><br/>_________________________<br/><br/>A final note: it’s not totally clear what the UK is asking for here, but one theory is: they want access to foreign users who have ADP encryption on, but are on UK soil (for example, foreign diplomats.)<br/><br/>This would be a technical nightmare, but it fits the facts.<br/><br/>Would be a technical nightmare because now you’d have two versions of Apple encryption, where the security changes depending on where in the world you are (ie your IP address.) This is so dangerous that it’s tantamount to a global backdoor, including against US citizens. 2025-10-02T13:02:37Z https://yabu.me/nevent1qqsfhgpmpmx4u86ldnf9mdmxk8q94r2rpxcuk6ksksxrnpxsdztmyyczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esj8clen In reply to <a href='/nevent1qqspwfrjjz0929344d94zg749xlxctu8ppzam5kg4ufgqqwrm3y76nq6dzh2s'>nevent1q…zh2s</a><br/>_________________________<br/><br/>As to question (1), the article isn’t super clear. But it’s worth pointing out that Apple doesn’t just provide end-to-end encryption for backups through their ADP feature. They also provide end-to-end encrypted backup for health data, web history and passwords, even without ADP.<br/><br/>So “we want a backdoor to access iCloud encryption” could mean access to those password vaults and secure health data. This means Apple would have to disable those features in the UK as well, or deploy new insecure encryption code that could affect users globally.<br/><br/>It’s also possible that the UK is asking for a backdoor in Apple’s iMessage text messaging system. That isn’t technically “iCloud” but it’s adjacent enough that I could see it getting presented that way. This would not be the first time the UK gov expressed interest in that.<br/><br/>What’s worrying here is that the UK government seems absolutely determined to access user private data, no matter the bad press and the consequences. And they’re now willing to do it overtly. Between this and recent moves against encryption in the EU, we’re going to a bad place. 2025-10-02T13:01:56Z https://yabu.me/nevent1qqspwfrjjz0929344d94zg749xlxctu8ppzam5kg4ufgqqwrm3y76nqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esl850ys In reply to <a href='/nevent1qqsw24etxsuln7duvrsnnqrugeyazs5mcht5fjc8lnhaczpgwt60tkqrn7u4x'>nevent1q…7u4x</a><br/>_________________________<br/><br/>So here we are again. This time the UK is narrowly targeting their request at UK users only. But this is baffling for two reasons.<br/><br/>First, Apple no longer offers the ADP encrypted backup feature to new UK users, and existing users are being migrated. So what is the UK asking for?<br/><br/>Second, how is Apple supposed to make a single encryption system that’s secure for US users but not for UK users? This would require that they partition their software globally and have many versions, which seems like a disaster. Are you sure you’re running the “secure” OS? 2025-10-02T13:00:38Z https://yabu.me/nevent1qqsw24etxsuln7duvrsnnqrugeyazs5mcht5fjc8lnhaczpgwt60tkqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es3t7cxu In reply to <a href='/nevent1qqs05pdggmmt6fjedd7ufglwc7k44tp7q79mp3aravf6xmcu0m6nhsgya2avy'>nevent1q…2avy</a><br/>_________________________<br/><br/>For context: last year the UK demanded (in secret) that Apple create a backdoor into their iCloud Advanced Data Protection system. This was done via a Technical Capability Notice, and could have given the UK govt a master key to all iCloud users’ data worldwide.<br/><br/>When this fact became public, it drew a huge backlash. Apple announced that it was entirely removing the encrypted backup feature for all UK users. Trump administration figures rebuked the UK government. 2025-10-02T12:59:57Z https://yabu.me/nevent1qqs05pdggmmt6fjedd7ufglwc7k44tp7q79mp3aravf6xmcu0m6nhsgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esw4zl3s From yesterday: the UK is demanding another backdoor in Apple’s encryption. <a href="https://www.ft.com/content/d101fd62-14f9-4f51-beff-ea41e8794265?accessToken=zwAGQBl4pP6YkdPRAf1iFPlPUdO-_-pB6HlCZQ.MEYCIQDqJlwcbpQ4rrKlgeSJtbcTgqpW4uTX3yGMCHf2gdS0fQIhAMtU15LHqeHwAXTZ3wWJLDzI72kjsauSKc8OEDpim1Gx&amp;sharetype=gift&amp;token=3767767d-fe68-4911-a97e-c067715e061e">https://www.ft.com/content/d101fd62-14f9-4f51-beff-ea41e8794265?accessToken=zwAGQBl4pP6YkdPRAf1iFPlPUdO-_-pB6HlCZQ.MEYCIQDqJlwcbpQ4rrKlgeSJtbcTgqpW4uTX3yGMCHf2gdS0fQIhAMtU15LHqeHwAXTZ3wWJLDzI72kjsauSKc8OEDpim1Gx&amp;sharetype=gift&amp;token=3767767d-fe68-4911-a97e-c067715e061e</a> 2025-10-02T12:53:14Z https://yabu.me/nevent1qqs9gyk5http2nlp5m2aq6mkvrg5kk93dk5x5kf7judyh2ejvf2ytrqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esympml4 “Industrial-scale pig butchering scams” god please let’s just skip this century and move on to the next. 2025-09-27T13:38:43Z https://yabu.me/nevent1qqspg2th5zygxxqt2wqvz5y64emqe7a2s92t5x9mmwf80gzw9n982dczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esp4u27r This battle will keep playing out over and over again until they achieve something that their own citizens have made it clear they don’t want. <a href="https://www.techradar.com/vpn/vpn-privacy-security/the-eu-wants-to-decrypt-your-private-data-by-2030">https://www.techradar.com/vpn/vpn-privacy-security/the-eu-wants-to-decrypt-your-private-data-by-2030</a> 2025-07-06T12:50:18Z https://yabu.me/nevent1qqsz5sf34e44fvzkwqf67tjql8lcymq35n347d0h8yt92973jxmepyqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es8w0zff A good story in WIRED giving updates on the situation with Dr. Xiaofeng Wang. <a href="https://www.wired.com/story/xiaofeng-wang-indiana-university-research-probe-china/">https://www.wired.com/story/xiaofeng-wang-indiana-university-research-probe-china/</a> 2025-04-02T19:06:01Z https://yabu.me/nevent1qqsrpx3lalle6xc6xylf3asyz7vv6phz24666amdq6rl9vnsn5uvrrqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esxqun0m The Indiana University chapter of the American Association of University Professors have written a letter demanding Dr. Xiaofeng Wang’s reinstatement.<br/> <img src="https://files.ioc.exchange/media_attachments/files/114/257/972/308/019/391/original/551d06df173a4797.png"> <br/> 2025-03-31T16:25:05Z https://yabu.me/nevent1qqs8r23r9n7phhyzzj7kecwh8a96c6xem5uecypxxq7cvw5gwspkxwqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esp50hdm I am jumping down with frustration at our academic community. People: we cannot do anything if everyone is unaware of professors getting arrested for multiple weeks. 2025-03-30T01:05:14Z https://yabu.me/nevent1qqszhpx94289c4cqzlzmzh6vvp5uutqlrsqqf097luux22mjun4lnzczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es2tjlzj In reply to <a href='/nevent1qqsdnvurk2z939sp2heaay7gm9c3wx3p650hh0xeyswkxn0rqqjsq2cq04knu'>nevent1q…4knu</a><br/>_________________________<br/><br/>Some early non-Indiana coverage of this story. <a href="https://talkingpointsmemo.com/edblog/sketchy-first-reports">https://talkingpointsmemo.com/edblog/sketchy-first-reports</a> 2025-03-30T01:02:56Z https://yabu.me/nevent1qqsvdzjy2e2v6nkxw5wc35nv3dka7s0hzm0ul3x5k8c7xx52thx494czyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esewvmff In reply to <a href='/nevent1qqsrks7rxhmskx48ay8sdputzecqvqwrwyygng74gj4vfsr9vfedatchhcgjs'>nevent1q…cgjs</a><br/>_________________________<br/><br/>Has anyone been in contact? I hear he’s been missing for two weeks and his students can’t reach him. How does this not get noticed for two weeks??? 2025-03-29T20:14:22Z https://yabu.me/nevent1qqsdnvurk2z939sp2heaay7gm9c3wx3p650hh0xeyswkxn0rqqjsq2czyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esgw75ur In reply to <a href='/nevent1qqs9nr9u6d9wdqst6tgh2x9lpha0xndw8p9rq8dkjrrgcgtrguy0dfg3whluy'>nevent1q…hluy</a><br/>_________________________<br/><br/>Update to this story: I’ve now heard reports that Wang’s students have been unable to contact him since mid-March. His website was taken down on the 19th. 2025-03-29T20:11:42Z https://yabu.me/nevent1qqsvjrgwnkgpgqhdug4psm97anv8t2gwmuy8qvu7970s5vgzu4wfj5szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esqmfurx In reply to <a href='/nevent1qqsdgq4gn7t4t93s22538cn56n4jxjwjf4rl778g5evxfqsfqhedems2day6q'>nevent1q…ay6q</a><br/>_________________________<br/><br/>this isn’t normal Karl. 2025-03-29T20:09:44Z https://yabu.me/nevent1qqsparqa2lakhnn59g5cw4qvunj08mkfwd8ay0ffzxtwuu4zvm9vl7qzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es796mx7 In reply to <a href='/nevent1qqsrx3ektrfyudf98pwl3xz7nftdlg72txquvxs7q0723v68y38guxgw0ll07'>nevent1q…ll07</a><br/>_________________________<br/><br/>None of this is in any way normal. 2025-03-29T17:41:28Z https://yabu.me/nevent1qqs9nr9u6d9wdqst6tgh2x9lpha0xndw8p9rq8dkjrrgcgtrguy0dfgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esxjp6w3 In reply to <a href='/nevent1qqs9qtz93zcms4aer7flq6qta7z6p6d4waleffsvnq7amyfgz38wf4spu4x9h'>nevent1q…4x9h</a><br/>_________________________<br/><br/>Xiaofeng’s profile is no longer available on IU sites. So here’s his Google Scholar. <a href="https://scholar.google.com/citations?user=pONu-5EAAAAJ&amp;hl=en">https://scholar.google.com/citations?user=pONu-5EAAAAJ&amp;hl=en</a><br/> <img src="https://files.ioc.exchange/media_attachments/files/114/246/166/266/585/875/original/0696ec39a4b0d9fa.jpeg"> <br/> 2025-03-29T14:22:36Z https://yabu.me/nevent1qqs9qtz93zcms4aer7flq6qta7z6p6d4waleffsvnq7amyfgz38wf4szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es8qlnrl In reply to <a href='/nevent1qqsxyvtxxa6w0r2tj43gst9egp0lve5ctuddl89h05gwj85cvjqazgcazlnpl'>nevent1q…lnpl</a><br/>_________________________<br/><br/>House belonged to Xiaofeng Wang.<br/> <img src="https://files.ioc.exchange/media_attachments/files/114/246/158/848/422/502/original/7062e8df68a62aca.jpeg"> <br/> <img src="https://files.ioc.exchange/media_attachments/files/114/246/159/194/957/742/original/104f6855366351e6.jpeg"> <br/> 2025-03-29T14:20:48Z https://yabu.me/nevent1qqsxyvtxxa6w0r2tj43gst9egp0lve5ctuddl89h05gwj85cvjqazgczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6ess5n64a I just heard that a cryptography professor at Indiana University had his house raided and was fired. Don’t know much more. <a href="https://www.heraldtimesonline.com/story/news/local/2025/03/28/fbi-department-of-homeland-security-agents-search-house-in-bloomington-indiana/82710451007/">https://www.heraldtimesonline.com/story/news/local/2025/03/28/fbi-department-of-homeland-security-agents-search-house-in-bloomington-indiana/82710451007/</a> 2025-03-29T14:14:57Z https://yabu.me/nevent1qqsd92g2g7dgrwxjy846cay2ly52k937c6rh5egzxndx5zzl3xksctqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eswqg4p6 In reply to <a href='/nevent1qqsqjjfl082ph07zpz7fsxxmj8zfqcs06kyzdql3pg9sthr0cq4h9mgw4megz'>nevent1q…megz</a><br/>_________________________<br/><br/>So there is one Signal Foundation doing the work that a dozen companies should be doing. No idea what to do about any of that. 2025-03-25T09:34:32Z https://yabu.me/nevent1qqsqjjfl082ph07zpz7fsxxmj8zfqcs06kyzdql3pg9sthr0cq4h9mgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esucca2j In reply to <a href='/nevent1qqsrtrvpxm0ux6a8gks45yy4wq3vl97s0c3p9lqs6tqn5zfvyyzjx7sl5l72c'>nevent1q…l72c</a><br/>_________________________<br/><br/>I guess my takeaway (1) is: no matter what people say, actual privacy is one of the most valuable services in the entire world, (2) network effects ensure a winner, yet (3) it is a totally unstable balancing act for for-profit companies to provide this, long term. 2025-03-25T09:34:06Z https://yabu.me/nevent1qqsrtrvpxm0ux6a8gks45yy4wq3vl97s0c3p9lqs6tqn5zfvyyzjx7szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eseymjmf In reply to <a href='/nevent1qqsrjuauy4y050s2nh7f4laqw6xjs9wh0uvrcfvyhmjlwn3djq7656qcty9et'>nevent1q…y9et</a><br/>_________________________<br/><br/>I have too many reasons to worry about this but that’s not really the point. The thing I’m worried about is that, as the only encrypted messenger people seem to *really* trust, Signal is going to end up being a target for too many people.<br/><br/>Signal was designed to be a consumer-grade messaging app. It’s really, really good for that purpose. And obviously “excellent consumer grade” has a lot of intersection with military-grade cryptography just because that’s how the world works. But it is being asked to do a lot!<br/><br/>Right now a single technical organization is being asked to defend (at least) one side in a major regional war, the political communications of the entire US administration, the comms of anyone opposed to them globally, big piles of NGOs, and millions of “ordinary” folks to boot.<br/><br/>(There is no such thing as “ordinary user” cryptography BTW. Those ordinary users include CEOs, military folks, people doing many-million-dollar crypto trades through the app, etc. It’s a lot to put on one app and one non-profit.)<br/><br/>On top of this, it’s only a matter of time until governments (maybe in the US or Europe) start putting pressure on the infrastructure that Signal uses — which is mostly operated by US companies. I’m not sure how this will go down but it’s inevitable. 2025-03-25T09:33:17Z https://yabu.me/nevent1qqsrjuauy4y050s2nh7f4laqw6xjs9wh0uvrcfvyhmjlwn3djq7656qzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es4030uj You should use Signal. Seriously. There are other encrypted messaging apps out there, but I don’t have as much faith in their longevity. In particular I have major concerns about the sustainability of for-profit apps in our new “AI” world. 2025-03-25T09:31:38Z https://yabu.me/nevent1qqswq03ttcm2n32z2z5dyny0gyfpxmhq2pd7el2756gaunzv2mjjueszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esc569yy In reply to <a href='/nevent1qqs9dgdheds6c83r036hr5kkr2zz3nqtm9uulj0j0ztrh59de9d4vzslmsr98'>nevent1q…sr98</a><br/>_________________________<br/><br/>This maybe confirms a bad feeling I was getting a few weeks back. <a href="https://ioc.exchange/@matthew_d_green/113929669316823012">https://ioc.exchange/@matthew_d_green/113929669316823012</a> 2025-03-13T16:56:58Z https://yabu.me/nevent1qqs9dgdheds6c83r036hr5kkr2zz3nqtm9uulj0j0ztrh59de9d4vzszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esxcg2kq In reply to <a href='/nevent1qqsgm4hw3sffc9yaamv2ypf4s4jv9qcdxvlhs8ad5lpf2zn0qlhfj2q9ppuyt'>nevent1q…puyt</a><br/>_________________________<br/><br/>Money quote(s) from the article. Note that there is no “you can’t deny” clause in the U.K. law.<br/> <img src="https://files.ioc.exchange/media_attachments/files/114/156/148/995/630/237/original/5153343597264996.jpeg"> <br/> 2025-03-13T16:50:02Z https://yabu.me/nevent1qqsgm4hw3sffc9yaamv2ypf4s4jv9qcdxvlhs8ad5lpf2zn0qlhfj2qzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es0rc62x In reply to <a href='/nevent1qqsz8jat540alyk7kc5397dass29mxxrs98sz39enk36kp98mmv0pes04jtsy'>nevent1q…jtsy</a><br/>_________________________<br/><br/>Senator Wyden asked both companies to confirm or deny that they’d received TCNs. Both parties said, essentially, “if we got one we wouldn’t be allowed to tell you under U.K. law.” <a href="https://www.wyden.senate.gov/news/press-releases/bipartisan-members-of-congress-to-uk-spy-court-uk-gag-orders-for-surveillance-backdoors-threaten-americans-security-and-privacy-impede-congressional-oversight">https://www.wyden.senate.gov/news/press-releases/bipartisan-members-of-congress-to-uk-spy-court-uk-gag-orders-for-surveillance-backdoors-threaten-americans-security-and-privacy-impede-congressional-oversight</a><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://files.ioc.exchange/media_attachments/files/114/156/146/194/088/062/original/a69c15213c21a1f6.mp4"></video><br/> 2025-03-13T16:49:18Z https://yabu.me/nevent1qqsz8jat540alyk7kc5397dass29mxxrs98sz39enk36kp98mmv0peszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es3cahsu So I am getting the distinct feeling that Google (in addition to Apple) got a Technical Capability Notice from the U.K. 2025-03-13T16:48:08Z https://yabu.me/nevent1qqsy9m208np9qjhtpy7f3uyfp5kgc3n68mfkd9yps0k3weqm4mthutgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eszt8xxs In reply to <a href='/nevent1qqsxpqcdgyd8q9yl50zjpm4kals42fql402gfv60w9rl7acw3z3z2egdtkk3y'>nevent1q…kk3y</a><br/>_________________________<br/><br/>I want to add a re-post of a blog post I wrote about the risks of AI combined with end-to-end encryption systems. <a href="https://blog.cryptographyengineering.com/2025/01/17/lets-talk-about-ai-and-end-to-end-encryption/">https://blog.cryptographyengineering.com/2025/01/17/lets-talk-about-ai-and-end-to-end-encryption/</a> 2025-03-12T12:08:46Z https://yabu.me/nevent1qqsxpqcdgyd8q9yl50zjpm4kals42fql402gfv60w9rl7acw3z3z2egzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esj73drj Meredith Whittaker on the security and privacy risks of Ai agents in messaging platforms, which I also worry about a lot. <a href="https://techcrunch.com/2025/03/07/signal-president-meredith-whittaker-calls-out-agentic-ai-as-having-profound-security-and-privacy-issues/">https://techcrunch.com/2025/03/07/signal-president-meredith-whittaker-calls-out-agentic-ai-as-having-profound-security-and-privacy-issues/</a> 2025-03-11T12:18:10Z https://yabu.me/nevent1qqsgqfdaw424amu5d7yxvy8j68u35ful3damd2hahj0ngyku78ldhgqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esxexmal So here’s a simple request to Apple. Apple iMessage needs to enable “disappearing messages.” And they need to do it soon. <a href="https://blog.cryptographyengineering.com/2025/03/01/dear-apple-add-disappearing-messages-to-imessage-right-now/">https://blog.cryptographyengineering.com/2025/03/01/dear-apple-add-disappearing-messages-to-imessage-right-now/</a> 2025-03-01T17:03:52Z https://yabu.me/nevent1qqsd3rajaqj3lxkzt8s7cm38msu56gxjuqfv0sns0ukduhgu6eq3lyczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esxgtjy5 Three questions about Apple, Encryption, and the U.K. <a href="https://blog.cryptographyengineering.com/2025/02/23/three-questions-about-apple-encryption-and-the-u-k/">https://blog.cryptographyengineering.com/2025/02/23/three-questions-about-apple-encryption-and-the-u-k/</a> 2025-02-23T16:51:40Z https://yabu.me/nevent1qqsr5qhn39lk5vzw96kthrc8s20vjf9wddqs9keq7jjhec2jnq6w80czyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6ese2vnca In reply to <a href='/nevent1qqsrhc26hqg6lmc4d4lpy8whw9sx7fn9906w9dahxudy72x74y2lcyc66z7pu'>nevent1q…z7pu</a><br/>_________________________<br/><br/>And the fact that there’s more at stake here may be important to you, since *your data* might be what’s at stake. // 2025-02-21T20:40:25Z https://yabu.me/nevent1qqsrhc26hqg6lmc4d4lpy8whw9sx7fn9906w9dahxudy72x74y2lcyczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es4d230c In reply to <a href='/nevent1qqs903yerj569edadavd6ddpc4ggtfpzz90l86yy7536mtfw3n93xrcmxm8dv'>nevent1q…m8dv</a><br/>_________________________<br/><br/>If you’re Apple in this situation — keeping in mind that you’re dealing with laws that mandate total secrecy, and a government that mixes national security and criminal law — what’s your first move? My guess is that your best strategy is to flip the table.<br/><br/>After all, if you disable the encryption feature at issue from all U.K. customers, to some extent the issue appears moot. (It’s not moot, of course. The U.K. would still be asking for access to non-U.K. users.) But it gives you a place you can work from.<br/><br/>So I don’t know that this is where Apple is coming from. I *do* know that, despite some deserved criticisms (many from me) Apple has never seemed like a company that just wants to submit and turn off encryption. So I want to propose that maybe, just maybe there’s more here. 2025-02-21T20:39:53Z https://yabu.me/nevent1qqs903yerj569edadavd6ddpc4ggtfpzz90l86yy7536mtfw3n93xrczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esjxusey In reply to <a href='/nevent1qqs967uc4emf5lc68m6k2s3fcp0jzxs5y4v6c76dmjlru9deuhm3cegj2duhu'>nevent1q…duhu</a><br/>_________________________<br/><br/>Let’s imagine the following hypothetical. Apple is not asked by the U.K. government to compromise encryption features for only U.K. users. They are asked, by the U.K. government, to compromise encryption features for iCloud users in countries all over the world, including the US.<br/><br/>This would be an absolutely crazy request, by the way. It would put the U.K. in the position of controlling the maximum level of security available to any user anywhere in the world, and doing it *secretly*. If you engage with that request, there is no coming back. 2025-02-21T20:38:57Z https://yabu.me/nevent1qqs967uc4emf5lc68m6k2s3fcp0jzxs5y4v6c76dmjlru9deuhm3cegzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esqr5zad One thing I’m seeing re: today’s Apple news is a lot of people blaming Apple. Saying that Apple is selling people out by withdrawing encryption features from the U.K. market. For example, here’s Tim Sweeney. I want to propose a different take.<br/> <img src="https://files.ioc.exchange/media_attachments/files/114/043/800/509/313/265/original/e5e5f79d0da3c341.jpeg"> <br/> 2025-02-21T20:38:19Z https://yabu.me/nevent1qqsxavuzu458fjq4lgeu0az7kaq2hqh9vjfcrf8qwzuyln3mr25vyhgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es0lkqkw In reply to <a href='/nevent1qqsfue3h4q04ve7jk3u92f3kaxdprpgryn3uuk8q7n9wfkdrzhr93dq288hev'>nevent1q…8hev</a><br/>_________________________<br/><br/>This move will not affect:<br/><br/>iMessage encryption (though backed-up messages will now be available at Apple)<br/>iCloud Keychain<br/>FaceTime<br/>Health data <br/><br/>Other services like iCloud Backup and Photos and text message backups will not be end-to-end encrypted. 2025-02-21T15:43:53Z https://yabu.me/nevent1qqsfue3h4q04ve7jk3u92f3kaxdprpgryn3uuk8q7n9wfkdrzhr93dqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eslz0lz2 In reply to <a href='/nevent1qqswnfdvkd5vf9ctez2hjphyrzmm5kfc203n25k4vpn9uf706y8z3mqjzv6zy'>nevent1q…v6zy</a><br/>_________________________<br/><br/>Additionally:<br/><br/>&#34;Apple can no longer offer Advanced Data Protection (ADP) in the United Kingdom to new users and current UK users will eventually need to disable this security feature. ADP protects iCloud data with end-to-end encryption, which means the data can only be decrypted by the user who owns it, and only on their trusted devices. We are gravely disappointed that the protections provided by ADP will not be available to our customers in the UK given the continuing rise of data breaches and other threats to customer privacy. Enhancing the security of cloud storage with end-to-end encryption is more urgent than ever before. Apple remains committed to offering our users the highest level of security for their personal data and are hopeful that we will be able to do so in the future in the United Kingdom. As we have said many times before, we have never built a backdoor or master key to any of our products or services and we never will.” 2025-02-21T15:39:53Z https://yabu.me/nevent1qqswnfdvkd5vf9ctez2hjphyrzmm5kfc203n25k4vpn9uf706y8z3mqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esjym4rl Apple has yanked Advanced Data Protection in the U.K. <a href="https://www.bbc.com/news/articles/cgj54eq4vejo">https://www.bbc.com/news/articles/cgj54eq4vejo</a> 2025-02-21T15:23:47Z https://yabu.me/nevent1qqsfmqrlhnjwetcdq82w436q2ezlafqlfpuevdxesqvp5cj5y4rjtlgzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6escjdvk3 Seems like a lot of the NIST standards have gone missing. 2025-02-15T13:27:28Z https://yabu.me/nevent1qqsdsn5glvw3zrlkz8galtd0raulnwv9hpszgr4n8vllhz5re9a6vagzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es0spk9r Legislators in the US are pushing back on the UK’s demands for backdoors in Apple encryption. <a href="https://archive.is/2025.02.13-120308/https://www.washingtonpost.com/technology/2025/02/13/apple-uk-security-back-door-adp/">https://archive.is/2025.02.13-120308/https://www.washingtonpost.com/technology/2025/02/13/apple-uk-security-back-door-adp/</a> 2025-02-13T13:23:40Z https://yabu.me/nevent1qqsv564jd7e8vcaanqpmxwzy36nepxewp9z34p5wq0k763y768mameqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esjzdqky I wrote a bit more about the UK’s recent move to allegedly demand backdoors in Apple encryption. <a href="https://blog.cryptographyengineering.com/2025/02/12/u-k-asks-to-backdoor-icloud-backup-encryption/">https://blog.cryptographyengineering.com/2025/02/12/u-k-asks-to-backdoor-icloud-backup-encryption/</a> 2025-02-12T19:09:29Z https://yabu.me/nevent1qqs00tt6ufze5sve7mvfa7kdg7dv9cc7lm908p303e0exn4f692z2kczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esw9a5wk Following up on the recent news about the U.K. government attempting to force Apple to backdoor its cloud encryption, Alex Stamos and I wrote this op-ed in the WSJ. <a href="https://www.wsj.com/opinion/u-k-kicks-apples-door-open-for-china-encryption-data-protection-deb4bc2b?st=uG1z3q&amp;reflink=article_copyURL_share">https://www.wsj.com/opinion/u-k-kicks-apples-door-open-for-china-encryption-data-protection-deb4bc2b?st=uG1z3q&amp;reflink=article_copyURL_share</a> 2025-02-11T02:40:15Z https://yabu.me/nevent1qqsdns403atpsxjwwklh2u06u40vhxmkscp2zeg9qfw4za3vfc9qhjqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es8h6uvy In reply to <a href='/nevent1qqsws9qumx9ttkf5huh8ygusq033hu6mvx6akj06csuy3wf5ysyzh4gz8qapq'>nevent1q…qapq</a><br/>_________________________<br/><br/>Apple hinted at this in a filing it made over a year ago to the U.K. government. <a href="https://publications.parliament.uk/pa/cm5804/cmpublic/InvestigatoryPowersAmendment/memo/IPAB10.htm">https://publications.parliament.uk/pa/cm5804/cmpublic/InvestigatoryPowersAmendment/memo/IPAB10.htm</a><br/> <img src="https://files.ioc.exchange/media_attachments/files/113/962/583/704/564/535/original/4ec78e6bd31371c3.jpeg"> <br/> 2025-02-07T12:23:50Z https://yabu.me/nevent1qqsws9qumx9ttkf5huh8ygusq033hu6mvx6akj06csuy3wf5ysyzh4gzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es6kepws In reply to <a href='/nevent1qqsxpgu98qpu4rag2jzp24m8xxr3e6ku9n3eh95zp792d7arp9gqgyquev5cg'>nevent1q…v5cg</a><br/>_________________________<br/><br/>The insane thing about the U.K. law is that it does not only apply to U.K. customers. It can potentially be used to go after non-UK customers as well. Say, people here in the US. 2025-02-07T12:23:05Z https://yabu.me/nevent1qqsxpgu98qpu4rag2jzp24m8xxr3e6ku9n3eh95zp792d7arp9gqgyqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esakl7m3 In reply to <a href='/nevent1qqs886jjrgmfw4zne860yz3ttelrw25pc0ps338f6ycf8ve6j7any6s4qgce7'>nevent1q…gce7</a><br/>_________________________<br/><br/>Let’s be clear about what this article is saying. The U.K. has a law that allows it to issue “technical capability notices” to companies. These notices require the company to effectively disable, or secretly backdoor, their encryption mechanisms. 2025-02-07T12:22:31Z https://yabu.me/nevent1qqs886jjrgmfw4zne860yz3ttelrw25pc0ps338f6ycf8ve6j7any6szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6eswj9ylg The U.K. may be preparing to issue Apple an order that forces them to (secretly) disable encryption. <a href="https://www.washingtonpost.com/technology/2025/02/07/apple-encryption-backdoor-uk/">https://www.washingtonpost.com/technology/2025/02/07/apple-encryption-backdoor-uk/</a> 2025-02-07T12:21:37Z https://yabu.me/nevent1qqsd3a9s072c3xlwxznppf8654gezqte890yf05j9rds6nqpms59a4czyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6espqzu3h In reply to <a href='/nevent1qqst64zq2snxxekre5984pxmc5fzsf6gtcjmndjnmqnrxrfarrwrw8g3yjzer'>nevent1q…jzer</a><br/>_________________________<br/><br/>I wish I could offer more than a funny feeling. I think the upshot of all of this is that the companies doing “opt in” backup should be pushing harder to make “opt in” into “heavily encouraged” and then into “by default.” The sooner the better. 2025-02-01T17:00:15Z https://yabu.me/nevent1qqst64zq2snxxekre5984pxmc5fzsf6gtcjmndjnmqnrxrfarrwrw8gzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esc2ettw In reply to <a href='/nevent1qqsvaxvrp2ye9cjf5nellsun3fktqdpxxt62xg87a9sgdddz6kk7c3s3zuhvp'>nevent1q…uhvp</a><br/>_________________________<br/><br/>So maybe it would be good to give a lay of the land on this issue. Here is what I know about fully-E2E backup in major services:<br/><br/>Apple iCloud: available as an opt-in (called ADP)<br/><br/>Google: on for Android backups, if you use Google/Android backup (caveats)<br/><br/>Meta/WhatsApp: available opt-in, sometimes by default (for texts) 2025-02-01T16:58:22Z https://yabu.me/nevent1qqsvaxvrp2ye9cjf5nellsun3fktqdpxxt62xg87a9sgdddz6kk7c3szyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esk40gr8 In reply to <a href='/nevent1qqsdm3eqkzm7jmwcdg8ysgqfvshavv4lxwn47kz6j6phjdcz5yxyjrq2x8ng3'>nevent1q…8ng3</a><br/>_________________________<br/><br/>This is a company that has cloud backup E2E encrypted as a default. And so at first I assumed that this was just a business demand — that it was costing the company a lot to keep this service running. But now I’m getting more worried about it. Maybe I’m paranoid. 2025-02-01T16:53:47Z https://yabu.me/nevent1qqsdm3eqkzm7jmwcdg8ysgqfvshavv4lxwn47kz6j6phjdcz5yxyjrqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es4wrcq3 In reply to <a href='/nevent1qqsgvc9tn03fg5a7zagaa0y4fkxvl4www532mg2rlamu2u6752skcpc549lh9'>nevent1q…9lh9</a><br/>_________________________<br/><br/>So why am I tweeting about this on a Saturday? Because something funny happened recently.<br/><br/>I heard (thirdhand) from a person at Big Company X that they were under pressure to disable end-to-end encryption for cloud backup. 2025-02-01T16:53:12Z https://yabu.me/nevent1qqsgvc9tn03fg5a7zagaa0y4fkxvl4www532mg2rlamu2u6752skcpczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esdnrrlq In reply to <a href='/nevent1qqs8s7gj86wlvkdxmzl3lxtxnqvlzqgextpcnk5mvqq869hcg2tlzvs496q93'>nevent1q…6q93</a><br/>_________________________<br/><br/>The one place where end-to-end encryption is “weakest”, ie where deployment rates are lowest, is *cloud backup*. This is, coincidentally, one of the best places for governments to obtain data. 2025-02-01T16:38:46Z https://yabu.me/nevent1qqs8s7gj86wlvkdxmzl3lxtxnqvlzqgextpcnk5mvqq869hcg2tlzvszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es3yqcwv In reply to <a href='/nevent1qqsq5hackgwm9l2mqfxmekj42ukke6ff4mumw9jsdm47gh8veh45wdq0fn604'>nevent1q…n604</a><br/>_________________________<br/><br/>Local device encryption seems to be ubiquitous now. It’s really hard to see a country demanding that phones become unencrypted. There would be huge pushback globally. So again, where is the weak link that governments can push on? 2025-02-01T16:36:53Z https://yabu.me/nevent1qqsq5hackgwm9l2mqfxmekj42ukke6ff4mumw9jsdm47gh8veh45wdqzyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6es4r4t7e In reply to <a href='/nevent1qqsgqywzsrssz839nmsqx4nu39pkuc4k4nlfdmfp52n8d3rtykfetms28rndd'>nevent1q…rndd</a><br/>_________________________<br/><br/>The question is *what*. Encrypted messaging seems to be proliferating and there are now many alternatives, from Apple, Meta, Signal. Many of those companies have threatened to leave countries that ban it. I have a hard time seeing any US-aligned country wipe that out. 2025-02-01T16:36:37Z https://yabu.me/nevent1qqsgqywzsrssz839nmsqx4nu39pkuc4k4nlfdmfp52n8d3rtykfetmszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6est9zlq4 Things have been relatively quiet on the “crypto wars” front, which makes me think we’re going to see something dramatic soon. Maybe not here in the US, but probably from another US-allied country. 2025-02-01T16:36:19Z https://yabu.me/nevent1qqsyuhk77r6whxnv9xly7t2t7hz8843tzuunzd58snnscqwnze2hqrczyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esrzvqph I wrote a post about how AI will interface with end-to-end encryption. TL;DR maybe not so well! <a href="https://blog.cryptographyengineering.com/2025/01/17/lets-talk-about-ai-and-end-to-end-encryption/">https://blog.cryptographyengineering.com/2025/01/17/lets-talk-about-ai-and-end-to-end-encryption/</a> 2025-01-17T15:43:55Z https://yabu.me/nevent1qqsxyqnet6k20y3p0r47hu9m9n9exatv8ds4smhdadrfumvg0njujuszyz4rkn2ftf9fv4t0enjllg23s04n8f6pq2em6uj5qwwqxzvqzq6esguz4fh Re: ChatControl. There is a rumor that an attempt to get Poland to change its position is under way. This would give the pro-ChatControl side a majority and make mass scanning of encrypted private messages the law in Europe. 2024-12-06T13:54:09Z