HN user
3 days ago this was in the news:
"Epstein files: DOJ withheld documents about claim Trump sexually abused minor"
https://www.cnbc.com/2026/02/24/epstein-trump-doj-garcia.htm...
Will it even make a single newspaper or talk show this weekend?
"Most of AdGuard's staff relocated in 2022"
So a lot of your staff remain in Russia?
If you've still got most of your devs working in Russia, and it looks like that from your github projects, I'm not sure what part of the comment you responded to is not correct or misinformation.
The only downside I experienced with using Apple Lockdown Mode is that my apple watch wont vibrate or notify me of incoming phone-calls on my iPhone.
The police and famous actors occupy completely different roles in society and should be treated differently.
3. SVB’s assets. They actually have enough assets to pay, but it will take time for those bonds to mature.
Not really. If 5 or 6 more regional banks fail next week due to depositors seeking the safety of big banks there won’t be enough money to guarantee deposits for more banks.
If they didn’t guarantee the SVB depositors that outcome would have been almost guaranteed, the train wreck would have impacted de-risked companies too, because the entire regional banking system would implode.
Not acting now to stop contagion because of some idea of fairness is short sighted.
Are people going optimistic about the efforts to make Python faster?
Watching growing startups hire a junior data scientist to analyse their new mountain of data is very entertaining. One of their first findings is their revenue/growth seems to be dropping… “we need someone to focus on growth/revenue ASAP”. They hatch a plan, build a team and magically their growth starts to recover.
The issue was spotted in April/May, the building happens during the summer and is launched In September… I’ve watch this cycle happen so many times, I’ve given up trying to point out that the issue is just seasonality.
2+2=5. VC’s look super active right now because they’re fighting for a small number of solid investments. LP’s have turned off the money taps and fake investment marks no longer pay the bills. They need startups that will actually generate revenue, finding them requires a lot more work and thats what we’re seeing. Soon we’ll start to see broke B & C tier investment funds turn into zombies.
Then you can’t trust the FF code not to send a copy to their own servers also.
Trying and failing to understand the logic of this feature.
Everyone.
The point is that if your threat model cares about interception, you have to verify the identity of users out of band - same as Signal or WhatsApp or whatever.
I’ve read your blog posts and this comment, congratulations it seems to have satisfied most people. Howerver it is NOT the same as Signal. Signal servers cannot just add a device to a group chat.
I would challenge you to get one reputable cryptographer to back what you’re claiming about these vulnerabilities and your proposed fixes.
To me Matrix isn’t secure, the organizations responses to these disclosures has been poor and the “fixes” weak.
To paraphrase another comment on this; if I have to trust the server for Matrix E2EE to work, why don’t I just use Slack? The whole point of E2EE is so you don’t have to trust the server.
And a “warning” that says something like “your group chat has been compromised by someone with access to the server or it might just be bob bought a new phone” is laughable as a status quo.
This is the issue distilled. And the retort seems to be “but we give a warning”.
Awfully weak stuff for a cypherpunk-ish protocol. The CCC crowd that rabidly hates anything centralised, thinks it’s insecure and corporate, are probably having a existential crisis. Matrix is doing a terrible job fixing the issues, worse they seem to downplaying and denying too. And the Tech press seem to dismiss the issue believing Matrixs’ claims there isn’t an issue.
What if someone already in the group adds a new device? That would hardly cause a flurry or surprise, it’s a common thing to happen. But using Matrix it could also mean whom ever controls the server could be reading all your messages. And the alert has to cover both scenarios. I’m not sure how you could message that in such a way to make it actionable. Especially to non-tech users. Even if they did understand it would require a mini investigation/“flurry” multiple times a month for even a modest sized group. My personal observation is that a group of about 50 have 1 new phone every two weeks, with seasonal increases around Sept/Oct and January 1st.
This is pretty big news. I wonder will there be an immediate push back by law enforcement and governments?
Their offices of record were empty when check by journalists. The founder is Russian, most of the engineering team is Russian. The founder visits Russia regularly. I assume their non-resident Russian engineers visit Russia too.Most of their user base is Russian. And they have an agreement with the Russian government not to be blocked if they cooperate on combatting terrorism.
Telegram has been used by opposition and protestors in Hong Kong, Russia, and Belarus.
How successful have those protestors been? In each case it seems like the government was always one step ahead of them and all there. So I don’t think it’s a giant leap to think they’re communications are compromised.
I’m absolutely astonished that anyone trusts Telegram for their communication. Both on a technological, ownership, operational and geopolitical basis. Their “agreement” with the Russians government is beyond sketchy, they’re 100% authoritarian located/exposed and they’ve a track record of bad encryption, what am I missing?
1Password. The largest feature disparity is 1password is designed and built by competent engineers. The history of breaches and technical mistakes Lastpass has made over the years is amazing for a tech company let alone a password manager.
There’s still not been an “official call” on this either by Poland or the US. And Ukraine still insists they weren’t their missiles and insisting they have access to the investigation. It’s very peculiar.
My personal view. They were Russian missiles, but it was 100% an error. NATO doesn’t want to have to respond so they blame Ukraine, Ukraine will use this to negotiate more weapons and air defenses.
Transfers of cryptocurrency from FTX have been frozen since yesterday.
Usernames are under development right now so this will address this issue one way or another.
Couldn’t come at a worse time for Musk. The Twitter acquisition has to be the worse tech acquisition ever, judging purely based on the dollar value on day 0.
You’ve failed to make a distinction between e2e encryption and TLS encryption, how do you explain that in UI?
And they picked a country known for its poor rule of law, constitutional protections and respect for privacy.
“Killing Signal”? They don’t publish their user numbers, but they were having outages due to massive user growth a few years ago.
Counter point most people think Telegram is e2ee secure messaging, but Telegram never said they were.
Improving UI/UX around to clarify the SMS function is insecure is almost impossible. Google did research around SSL cert warnings a few years back, their conclusion was that people don’t read and just dismiss warnings, no mater what UI was. A frightening percentage of people also think the security padlock icon is actually a handbag.
Most people simply lack the technical basis to understand the security implications of sms. And for Signal to be a secure messaging system by default SMS needs to be removed.