Skip to main content

mastodon - Link to source

For those who have InfoSec, privacy, security, and/or related technology expertise…

Would you use Bitchat?

(Feel free to elaborate in the comments and/or boost if you’d like to see the opinion of others.)

#Bitchat #JackDorsey #InfoSec #Privacy #Security #Technology #OSS #Encryption

  • Yes (1%, 5 votes)
  • No (36%, 108 votes)
  • Jack Dorsey is not to be trusted (62%, 186 votes)
  • I just want to see the results (21%, 65 votes)
297 voters. Poll end: 5 months ago

#privacy #security #technology #encryption #infosec #JackDorsey #oss #bitchat
in reply to Mark Wyner Won’t Comply

Florian K.
mastodon - Link to source
Florian K.
• •
Why is there a "I just want to see the results" option when Mastodon has the neat button "Show results" 😅?
Also it is multi-select (which you might want)
in reply to Florian K.

Mark Wyner Won’t Comply
mastodon - Link to source
Mark Wyner Won’t Comply
• •
@winkelmesser because if you vote you’ll get a notification when it ends. Then you can see the final results.
@Florian K.
in reply to Mark Wyner Won’t Comply

Bolt
mastodon - Link to source
Bolt
• •

I wouldn't.

- The GitHub repo has a warning saying not to trust its security as of now
- Other options already exist, like Briar, with existing userbases, and the ability to also relay messages over Wi-Fi, Cell service, and Tor.

Nothing stands out to me that makes it seem *inherently* untrustworthy if it were to later be audited, and gain a strong userbase though.

As much as I don't like Jack Dorsey, he does have an interest in privacy/freedom-preserving tech that seems genuine.

A Warming Private message and channel features have not received external security review and may contain vulnerabilities. Do not use for sensitive use cases, and do not rely on its security until it has been reviewed. Now uses the Noise Protocol for identity and encryption. Public local chat (the main feature) has no security concerns.
in reply to Mark Wyner Won’t Comply

sysosmaster
mastodon - Link to source
sysosmaster
• •

looking back, I do think the question is slightly flawed in nature…. “Would you use” is not the same as “would you recommend”….

A use is also dependent on other factors. Such as what other people are using and how would you use it. (Would I be running this the same as any other toxic malware…. Yes. Would that mean I would not “use” it if push came to shove…. No, I would use it I. A very narrow and specific usecase. )

Would I recommend diffrent solutions…. Most definitely.

in reply to sysosmaster

Mark Wyner Won’t Comply
mastodon - Link to source
Mark Wyner Won’t Comply
• •
@sysosmaster I appreciate your perspective. All the same, my question isn’t flawed. I asked it explicitly how I intended. I wanted to know if people would use it, not if they’d recommend it.
@sysosmaster
in reply to Mark Wyner Won’t Comply

Tony Arcieri🌹🦀
mastodon - Link to source
Tony Arcieri🌹🦀
• •

Jack is a tool and I don't really want to use anything associated with him. However a quick glance at Bitchat shows it's built on Noise, so depending on what particular implementation they're using the cryptography may not be terrible. Still questions around how identity is managed.

All that said, as much as I was a fan of the overall concept of ad hoc P2P mesh networks (see e.g. Vanadium, RIP), it's incredibly difficult to do well (see also Vanadium), especially in a way that scales

⇧