Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform


https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117

Signal has moved the ball on e2e for the masses, but it's centralized arch makes it a honeypot for metadata collection & timing correlation attacks. p2p networks w/ plausible deniability bloom filters like @waku & mixnets like @nymproject make attacks like this harder w/ the tradeoff of higher bandwidth & latency.

Building uncompromising web3 communication at scale.

https://waku.org
Part of the @logos-stack .

The next generation of privacy infrastructure.

Software Engineer @ Cadence Design Systems. B4: Stanford EE / Illinois ECE

Feels like UX is usually the biggest trade off right? The fact that our industry runs on top of TG continues to baffle me but I’ve accepted the network effect

Making DeFi accessible to everyone - building @starta | /9to5dotmeme on the side FID 675

Users don’t care about decentralization any more than they do about privacy the moment they have to inconvenience themselves. I tried to make privacy easier to preserve by fighting back against dark patterns when I helped write the CCPA.

Unfortunately decentralization tends to be clunkier and more expensive than centralization and in any case I think trustlessness is a much more achievable property for way less cost and inconvenience

Yep, but I think UX needs to be more expansive than just in-app animation candy. UX could be a big tent that includes user metadata privacy, data sovereignty, the uptime that only a decentralized network can provide, etc. The problem is that the tradeoffs & shortcuts taken are not salient to users, and once you make it clear, they often do understand & care about it. (my bet is that this will continue & it's why crypto will win)