lemmy.yachts
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
ardi60@reddthat.com to Technology@lemmy.worldEnglish · 2 days ago

X is now offering me end-to-end encrypted chat — you probably shouldn't trust it yet | TechCrunch

techcrunch.com

external-link
message-square
91
fedilink
314
external-link

X is now offering me end-to-end encrypted chat — you probably shouldn't trust it yet | TechCrunch

techcrunch.com

ardi60@reddthat.com to Technology@lemmy.worldEnglish · 2 days ago
message-square
91
fedilink
X's new encrypted messaging feature, XChat, has some red flags.
  • earthworm@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    129
    arrow-down
    1
    ·
    edit-2
    2 days ago

    TL;dr of the article :

    1. They keep your private key on their servers.
    2. Their implementation allows for AITM attacks.
    3. It’s closed source.
    4. There’s no perfect forward secrecy.

    This secret stays between you, me, and Elon.

    I hope politicians use the hell out of it, so we can see what they really think when it gets (inevitably) hacked in a few weeks.

    • answersplease77@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 day ago

      is it different with signal, telegram, whatsapp?

    • renegadespork@lemmy.jelliefrontier.net
      link
      fedilink
      English
      arrow-up
      21
      arrow-down
      1
      ·
      2 days ago

      They keep your private key on their servers.

      Then it’s literally not even E2EE, lol

    • Naich@lemmings.world
      link
      fedilink
      English
      arrow-up
      24
      ·
      2 days ago

      What is the “A” in “AITM”?

      • pirat@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        21 hours ago

        Agencies

      • RVGamer06@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        24 hours ago

        Asshole

      • BananaOnionJuice@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        27
        ·
        2 days ago

        This is the first time I heard of AITM, thought it was a new name for MITM:

        https://www.blueshielditns.com/post/man-in-the-middle-vs-adversary-in-the-middle-understanding-the-differences-and-staying-safe

        • KubeRoot@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 day ago

          Are you sure that site is trustworthy? It kinda reads like an LLM being told to explain the difference between two names for the same thing and basically rephrasing the same thing. I’d imagine it might just be a different name to get rid of a male-coded word.

      • Kami@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        20
        ·
        2 days ago

        Adversary

      • Encrypt-Keeper@lemmy.world
        link
        fedilink
        English
        arrow-up
        14
        arrow-down
        1
        ·
        2 days ago

        It’s just MITM but with extra steps

        • Someonelol@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          13
          ·
          2 days ago

          Ah yes, Malcolm in the Middle is behind this all along.

      • lemmyman@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        arrow-down
        2
        ·
        2 days ago

        Anal

      • Triumph@fedia.io
        link
        fedilink
        arrow-up
        10
        arrow-down
        3
        ·
        2 days ago

        Aliens

      • gressen@lemmy.zip
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        4
        ·
        2 days ago

        Anyone

      • floofloof@lemmy.ca
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        2
        ·
        2 days ago

        Elon.

      • trashboat@midwest.social
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        3
        ·
        2 days ago

        Apple

      • ThePantser@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        3
        ·
        2 days ago

        Administrator

    • CosmoNova@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      2
      ·
      2 days ago

      If you chat on Xitter you‘re chatting with mecha Hitler.

    • Goodlucksil@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      2 days ago

      They are stupid, but not that stupid.

      • hansolo@lemmy.today
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        2 days ago

        Never attribute to malice what can be attributed to incompetence.

        • tabular@lemmy.world
          link
          fedilink
          English
          arrow-up
          12
          ·
          edit-2
          2 days ago

          I used to give the benefit of the doubt but when there are bad incentives in play and shit keeps happening… then perhaps that is naïve sometimes, unfortunately.

          • hansolo@lemmy.today
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            1
            ·
            2 days ago

            Do you mean bad incentives?

            And sure, I don’t disagree, but these people are also not actually that smart. I would worry more about this getting hacked in a week way before Elon gets a chance to use it against anyone.

            • tabular@lemmy.world
              link
              fedilink
              English
              arrow-up
              3
              ·
              2 days ago

              Thanks, I do.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @[email protected]
  • @[email protected]
  • @[email protected]
  • @[email protected]
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 2.89K users / day
  • 8.32K users / week
  • 14.6K users / month
  • 33.5K users / 6 months
  • 1 local subscriber
  • 76.3K subscribers
  • 12.7K Posts
  • 335K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.world
  • L3s@hackingne.ws
  • L4s@hackingne.ws
  • BE: 0.19.7
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org