Lemmy Mengsk
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
ardi60@reddthat.com to Technology@lemmy.worldEnglish · 23 hours ago

X is now offering me end-to-end encrypted chat — you probably shouldn't trust it yet | TechCrunch

techcrunch.com

external-link
message-square
64
fedilink
237
external-link

X is now offering me end-to-end encrypted chat — you probably shouldn't trust it yet | TechCrunch

techcrunch.com

ardi60@reddthat.com to Technology@lemmy.worldEnglish · 23 hours ago
message-square
64
fedilink
X's new encrypted messaging feature, XChat, has some red flags.
  • earthworm@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    111
    arrow-down
    1
    ·
    edit-2
    23 hours ago

    TL;dr of the article :

    1. They keep your private key on their servers.
    2. Their implementation allows for AITM attacks.
    3. It’s closed source.
    4. There’s no perfect forward secrecy.

    This secret stays between you, me, and Elon.

    I hope politicians use the hell out of it, so we can see what they really think when it gets (inevitably) hacked in a few weeks.

    • CosmoNova@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      8 hours ago

      If you chat on Xitter you‘re chatting with mecha Hitler.

    • renegadespork@lemmy.jelliefrontier.net
      link
      fedilink
      English
      arrow-up
      16
      ·
      16 hours ago

      They keep your private key on their servers.

      Then it’s literally not even E2EE, lol

    • Naich@lemmings.world
      link
      fedilink
      English
      arrow-up
      21
      ·
      23 hours ago

      What is the “A” in “AITM”?

      • BananaOnionJuice@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        24
        ·
        21 hours ago

        This is the first time I heard of AITM, thought it was a new name for MITM:

        https://www.blueshielditns.com/post/man-in-the-middle-vs-adversary-in-the-middle-understanding-the-differences-and-staying-safe

      • Encrypt-Keeper@lemmy.world
        link
        fedilink
        English
        arrow-up
        13
        ·
        21 hours ago

        It’s just MITM but with extra steps

        • Someonelol@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          10
          ·
          19 hours ago

          Ah yes, Malcolm in the Middle is behind this all along.

      • lemmyman@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        2
        ·
        19 hours ago

        Anal

      • Kami@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        17
        ·
        23 hours ago

        Adversary

      • Triumph@fedia.io
        link
        fedilink
        arrow-up
        8
        arrow-down
        2
        ·
        22 hours ago

        Aliens

      • floofloof@lemmy.ca
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        1
        ·
        23 hours ago

        Elon.

      • gressen@lemmy.zip
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        3
        ·
        23 hours ago

        Anyone

      • trashboat@midwest.social
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        2
        ·
        21 hours ago

        Apple

      • ThePantser@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        3
        ·
        22 hours ago

        Administrator

    • Goodlucksil@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      23 hours ago

      They are stupid, but not that stupid.

      • hansolo@lemmy.today
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        22 hours ago

        Never attribute to malice what can be attributed to incompetence.

        • tabular@lemmy.world
          link
          fedilink
          English
          arrow-up
          10
          ·
          edit-2
          15 hours ago

          I used to give the benefit of the doubt but when there are bad incentives in play and shit keeps happening… then perhaps that is naïve sometimes, unfortunately.

          • hansolo@lemmy.today
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            1
            ·
            22 hours ago

            Do you mean bad incentives?

            And sure, I don’t disagree, but these people are also not actually that smart. I would worry more about this getting hacked in a week way before Elon gets a chance to use it against anyone.

            • tabular@lemmy.world
              link
              fedilink
              English
              arrow-up
              3
              ·
              16 hours ago

              Thanks, I do.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 2.95K users / day
  • 8.12K users / week
  • 15.4K users / month
  • 30.5K users / 6 months
  • 1 local subscriber
  • 76.3K subscribers
  • 13.6K Posts
  • 513K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.world
  • L3s@hackingne.ws
  • L4s@hackingne.ws
  • BE: 0.19.8
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org