This secret stays between you, me, and Elon.
X is now offering me end-to-end encrypted chat — you probably shouldn't trust it yet | TechCrunch
Submitted 22 hours ago by ardi60@reddthat.com to technology@lemmy.world
Comments
SnoringEarthworm@sh.itjust.works 22 hours ago
renegadespork@lemmy.jelliefrontier.net 15 hours ago
They keep your private key on their servers.
Then it’s literally not even E2EE, lol
Naich@lemmings.world 22 hours ago
What is the “A” in “AITM”?
BananaOnionJuice@lemmy.dbzer0.com 20 hours ago
This is the first time I heard of AITM, thought it was a new name for MITM:
kami@lemmy.dbzer0.com 22 hours ago
Adversary
EncryptKeeper@lemmy.world 20 hours ago
It’s just MITM but with extra steps
lemmyman@lemmy.world 18 hours ago
Anal
Triumph@fedia.io 21 hours ago
Aliens
gressen@lemmy.zip 22 hours ago
Anyone
floofloof@lemmy.ca 22 hours ago
Elon.
trashboat@midwest.social 20 hours ago
Apple
ThePantser@sh.itjust.works 21 hours ago
Administrator
CosmoNova@lemmy.world 7 hours ago
If you chat on Xitter you‘re chatting with mecha Hitler.
Goodlucksil@lemmy.dbzer0.com 22 hours ago
They are stupid, but not that stupid.
hansolo@lemmy.today 21 hours ago
Never attribute to malice what can be attributed to incompetence.
artyom@piefed.social 21 hours ago
offering me end-to-end encrypted chat
No one - not even X - can access or read your messages
This key is then stored on X’s servers
So…they’re just blatantly lying?
ReallyActuallyFrankenstein@lemmynsfw.com 21 hours ago
Right, the have the key, and the lock, but the key isn’t in the lock, so it’s utterly impossible for them to access it.
FauxLiving@lemmy.world 21 hours ago
Typical corpo doublespeak
InnerScientist@lemmy.world 12 hours ago
It’s encrypted with a 4 digit pin so they’ll have to sped at least 316.8809e-10 years on brute-forcing it.
FreedomAdvocate@lemmy.net.au 19 hours ago
No - did you even read the article? An x employee confirmed that they’re using the “special” servers to store the keys that mean that they cannot see them. The author then says that the employee confirming it doesn’t mean they do, because the author doesn’t want it to be true.
Natanael@infosec.pub 4 hours ago
There are hardware for that called hardware security modules, but yeah I definitely wouldn’t trust Twitter’s implementation - especially because they probably just need the auth team to tell the HSM that the user logged in when they didn’t to get that key
SaharaMaleikuhm@feddit.org 13 hours ago
The Muskrat lying? No, never!
edgarzen@sh.itjust.works 2 hours ago
Signal and encrypted email only.
TwinTitans@lemmy.world 7 hours ago
Why are people evening using this site anymore? It’s been severely compromised.
TuxEnthusiast@sopuli.xyz 4 hours ago
Cause it has an audience unlike mastodon or bluesky. All the other alternatives are dead.
balance8873@lemmy.myserv.one 39 minutes ago
Your hero just joined bluesky so not that dead
lechekaflan@lemmy.world 4 hours ago
What some call “normies” besides most celebrities.
CitizenKong@lemmy.world 5 hours ago
I don’t trust anything coming out of Elon’s fascisthole. Deleted the app when he bought it and never looked back.
renegadespork@lemmy.jelliefrontier.net 15 hours ago
How about: “You probably should trust or use X at all… ever.”
popekingjoe@lemmy.world 22 hours ago
…yet? How bout just not trusting it at all?
Manjushri@piefed.social 22 hours ago
Hah, beat me by 17 seconds!
adespoton@lemmy.ca 12 hours ago
YET?
sentient_loom@sh.itjust.works 22 hours ago
That “yet” is the narrative hook to trick us into feeling like it will soon be trustworthy, and that our assumed suspicions refer to a temporary state of untrustworthiness. Clever girls!
paraphrand@lemmy.world 20 hours ago
Feels like Bluesky’s federation promise.
sentient_loom@sh.itjust.works 20 hours ago
I think you can install your own bluseky instance and federated with others.
Reverendender@sh.itjust.works 21 hours ago
Correct, foolish human! Now sign up.
br0da@lemmy.world 11 hours ago
It’s like a regular encrypted chat but with peepholes and racism.
Manjushri@piefed.social 22 hours ago
Yet? What kind of idiot would imagine that X would or could provide actual secure communication?
Zeon@lemmy.world 17 hours ago
It’s proprietary, how could you possibly trust it?
lando55@lemmy.zip 10 hours ago
Do you think this is the face of a liar
Etzello@midwest.social 8 hours ago
The face of this liar makes my face go on fire
lechekaflan@lemmy.world 4 hours ago
LOL nope. I’d use anything else.
Pondis@lemmy.world 15 hours ago
I wouldnt trust X with a picture of my shoes
6nk06@sh.itjust.works 22 hours ago
Our good friend Elon cannot be trusted? I don’t believe you, this must be propaganda to discredit his good manners.
ReallyActuallyFrankenstein@lemmynsfw.com 21 hours ago
Accusing gentle Elon of a misdeed?
hansolo@lemmy.today 21 hours ago
Quick everyone, install this just so that if Pete Hegseth invites people to the next airstrikes chat group, your satirical JD Vance account will be next to the real JD Vance’s account and he’ll probably add you both and figure it out later.
HootinNHollerin@lemmy.dbzer0.com 21 hours ago
Or ever
TomMasz@piefed.social 20 hours ago
Or ever.
givesomefucks@lemmy.world 22 hours ago
Never trust any social media sites “private” chat.
Especially not one of the big ones run by weirdo fascists. You know Elmo is going to snoop on anyone relatively famous, or that just say something he doesn’t like.
In all honesty, there’s zero reason to even have accounts on them
pivot_root@lemmy.world 19 hours ago
Even if the server had zero knowledge of your private keys (which is doubtful), I’m sure the client code won’t have any backdoors. It’s only the social media “platform” owned by the world’s most thin-skinned billionaire.
if (message.contains("elon") || message.contains("musk")) { upload(chat.privateKey) }
Zedstrian@lemmy.dbzer0.com 20 hours ago
Don’t trust it at all.
Telorand@reddthat.com 21 hours ago
Cool, and I bet it will be just as trustworthy as WhatsApp (i.e. not at all).
obsidianfoxxy7870@lemmy.blahaj.zone 21 hours ago
I do really like E2EE but why do I need it in everything?
If I want to talk to someone I would rather them message me on Signal or something that I trust more.
renegadespork@lemmy.jelliefrontier.net 15 hours ago
Yeah, way too many services have chats. I think it’s because every large platform wants to be an “everything app”. Messaging is a really easy to feature to implement to (theoretically) add value.
Netrunner@programming.dev 5 hours ago
Brain damaged people trust x again.