Skip Navigation
Jump
Panera Bread’s Charged Lemonade blamed for a second death, lawsuit alleges
  • You mean 35 mg of caffeine doesn't do that to you. Food safety laws aren't written for the average person they are written for the more vulnerable.

    2
  • Jump
    Crypto genius
  • Yes, I understand how monero works. Yeah you'll get away with buying some groceries or whatever with it, but people who go through bankruptcy (especially who aren't rich, and are felons) have a close eye from the government on their finances. If you try to buy a house or a car or anything actually life changing with that, you're pretty likely to get caught and charged with fraud etc., unless you legitimise it, that is, launder it.

    10
  • Jump
    What the hell! Let's all just go crazy!
  • Yes, people often/usually drop the g in quick/casual speech, but most regions I have heard do pronounce it when speaking slower or more formally.

    1
  • Jump
    Firefox is on the brink of being dropped by the US Government
  • Something can't become categorically imperative, a quiddidity such as an essentially categorical property is invariant with respect to time. It either is or it isn't. Per contra, aesculapian aid might become dispositionally required.

    8
  • Jump
    France bans ministers from WhatsApp, Signal; demands French alternatives
  • You seem to be a bit confused about how asymmetric encryption works. There is no need for private keys to be transmitted for a messaging service to work. I encourage you to read about the difference between public and private keys in asymmetric encryption. They are generated in pairs, such that when something is encrypted using a public key, it can only be decrypted using the corresponding private key. So it's not correct to say that the message can't be decrypted by the intended recipient - they are in fact the only party who can, but even the sender can not.

    2
  • Jump
    France bans ministers from WhatsApp, Signal; demands French alternatives
  • It should most definitely be a valid assumption.

    If the key passes through their servers at all (and it probably does,) then they have access to the keys and sufficient information to decrypt it. it's possible the app does send keys independent of their server- I don't know- but I very much doubt it.

    The keys shouldn't be on or go through a server anywhere, that would be an absolute joke.

    What makes you think that private keys are being sent anywhere? This app uses a slightly modified version of the Signal protocol (because of course it does), as they describe here, section 27, page 90. Only public keys should ever leave your device, otherwise no amount of showing the code would make it secure. That's the whole point.

    Again, with the client code you should be able to tell that the keys are generated there and not sent anywhere.

    As I said, with any app, just because they publish some server code does not mean that that's what they're running on their server - for security you have to be sure that the app is sufficiently secure on its own. Even if they were running the exact public code that "didn't save the keys" the server could harvest them from memory.

    2
  • Jump
    Always remember, both sides are just as bad!
  • This is literally the platform of right-populism. "Wasn't it good in the 50s when a single income for a guy with an associates was enough to support a family in a life of comfort, and a summer job could pay for university? That's why women shouldn't be in the workforce and black people shouldn't have rights."

    5
  • Jump
    France bans ministers from WhatsApp, Signal; demands French alternatives
  • You've misunderstood. With the client code you can be sure that your messages are properly encrypted before leaving the device. If that's done correctly, you don't need to trust the server, because it can't read your messages just like some attacker couldn't. Signal is pretty similar, they didn't update the public server source for a few years, and even with the source, we can't know that that is what they're actually running. But with a verified build of the client code we can know that our messages are encrypted such that, even if they held on to them until quantum computers became mainstream, they'd still be properly protected.

    4
  • Jump
    France bans ministers from WhatsApp, Signal; demands French alternatives
  • Only the client. Though that's probably enough to make sure messages leave your device suitably encrypted. Depending on the algos it could be quite vulnerable to hndl attacks, though, or (less likely) any undiscovered backdoors in the implementations. Of course, even for Signal one has to trust they're using the public server code anyway, but at least we know they're folding in a quantum-resistant algo.

    7
  • Jump
    Offering solutions is annoying
  • when usually the purpose of a question like that is more like "what was the result when you talked to them?"

    But then say that? There's a clear distinction in tone between those two wordings, even if they express similar thoughts.

    2
  • Jump
    Check out this time-saving lifehack
  • My knees get really sore and stiff sitting bent for a long time, I need to stand up when I can. I'm not in a rush to get off the plane 95% of the time (unless late for a tight connection obviously) but I can see how it'd look like that.

    8