An analysis of X(Twitter)'s new XChat features shows that X can probably decrypt users' messages, as it holds users' private keys on its servers
Technology
48
Beiträge
32
Kommentatoren
68
Aufrufe
-
This post did not contain any content.
They control all the endpoints/clients so even if they didnt, they could change it at any moment as the code isnt open...
-
That's not "probably". If they have the key they straight up have access. The key to my house can't just probably unlock the door.
seriously, that's the most convoluted wording possible for a simple statement. If they have the private keys they have the private keys and there's no need for analysis.
-
Which effectively means the messages aren't encrypted. Cool.
It also effectively means they are reading those messages.
-
This post did not contain any content.
Xchat is an irc client though.
-
Xchat is an irc client though.
The one true XChat
-
seriously, that's the most convoluted wording possible for a simple statement. If they have the private keys they have the private keys and there's no need for analysis.
Weird, I didn't see 'probably' once in your reply.
-
Which effectively means the messages aren't encrypted. Cool.
I mean they’re encrypted in transit. They’re just not end to end encrypted.
-
I'm surprised nobody posted the surprised_pikachu.gif yet.
-
This post did not contain any content.
Enshittification continues
-
This post did not contain any content.
Yes and? Do people who use X really care about privacy. Everyone who even remotely cared already jumped ship and moved on to matrix, signal, Simplex etc.
And im not even mentioning the fact X is owned by a psychopath. But hey let's pretend they care about your privacy.
-
This post did not contain any content.
Deleted
-
This post did not contain any content.
Stop using fascist things.
Stores, websites, apps, cars, hosting, operating systems, and all other providers of goods/services should be audited by you. You should then ask yourself if you want to give them your money and/or your trust.
-
Stop using fascist things.
Stores, websites, apps, cars, hosting, operating systems, and all other providers of goods/services should be audited by you. You should then ask yourself if you want to give them your money and/or your trust.
I'm trying, but they keep forcing it into devices I already own and even with turning it off in the settings sometimes it gets turned back on during updates. At least avoiding the X/shitter bot is easy enough, but the rest are just as invasive.
-
I mean they’re encrypted in transit. They’re just not end to end encrypted.
Do not look at all those (proprietary) E2EE definitions to closely - you might find several that define TLS as end to end...
-
I'm trying, but they keep forcing it into devices I already own and even with turning it off in the settings sometimes it gets turned back on during updates. At least avoiding the X/shitter bot is easy enough, but the rest are just as invasive.
Out of curiosity what devices are giving you these issues? I may know of some alternatives depending.
-
The one true XChat
inb4 the logo looks like this:
-
Out of curiosity what devices are giving you these issues? I may know of some alternatives depending.
Anything with a web browser. Work computers. Phone. Have to turn off the AI crap on all of those manually after they were added in updates.
Don't really believe turning off the settings keeps them from farming data either, since they constantly lie about what data they collect and use for training.
-
Do not look at all those (proprietary) E2EE definitions to closely - you might find several that define TLS as end to end...
I mean TLS is also encryption in transit, it’s in the name. And it would sorta be end to end if you’re terminating TLS at the end you’re trying to talk to.
-
This post did not contain any content.
If anyone except you has the private key, then your private messages are not private.
-
If anyone except you has the private key, then your private messages are not private.
To extend this, that includes YOU giving your key to another application to decrypt those messages.
For example if you use an app or browser extension, that app or browser extension has access to that key. Additionally the browser itself or operating system had access to the key.
Now they may be fully audited. They may have a great reputation. You may trust them. But they are part of the decryption (and if sending encryption) process.
It's a chain of trust, you have to trust the whole chain.
