Isn't it funny how within 24h the approach to #Keybase changed from "it's secure and awesomesauce, use it for everything!!1!" to "I just use it to share stuff but warn users not to do sensitive stuff there"?

No, actually it's not funny. Because it keeps happening:

1. a new shiny startup does X in an open source but centralized way
2. a lot of "experts" saying how great it is; some greybeards warn that it's centralized but nobody listens - it's so shiny and cool!
(cont.)

(cont.)
3. startup makes a horrible business decision or gets bought up by someone onerous; it's inevitable, it's a startup.
4. everybody's shocked, shocked™, but still go with "using it for non-sensitive stuff, too late to move on"
5. rinse, repeat.

Do you know why we don't get a proper, decentralized, easy to use software solutions? This is why. Because we keep letting shitty startups crowd out the good projects.

(cont.)

(cont.)

Security is hard. Decentralization is hard. Usability is hard.

Being first to market is *easier* if you drop some, or most, of these.

So, shitty startups get to market first, and then crowd out the decent-but-necessarily-slower projects.

Every time you recommend a tool that follows this pattern of abuse, you are enabling it. You, personally, become a part of the problem. You, personally, help a shitty startup crowd out a decent project.

(cont.)

(cont.)

This is obviously not all black and white. There are edge cases, but then again there are clear red flags.

#Signal is a good example of an edge case. Decentralized? No. Startup? Also no. So, one red flag fewer.

Does this mean we can be certain Signal will not screw us over one day? No. But it not being a startup lowers that chance considerably, at least.

We techies need to be more mindful of this. After all, we are all complicit.

(end.)

Follow

@rysiek

Telegram isn't a start up either and arguably this shelters it from some specific risks that startups are exposed to

@AbbieNormal sure. but with Telegram there are other red flags, like the way they originally responded to some rather serious concerns about their home-grown crypto.

@rysiek @AbbieNormal

Most people don't use the "Secret chats" function, just client-to-server encryption.

@cuniculus @AbbieNormal which begs the question why are there non-secret chats implemented at all. But let's not open that can of worms! :blobcatcoffee:

@rysiek @AbbieNormal

Usage on all devices and large public groups. Also, secret chats are only supported on iOS, Android and macOS.

The official Windows and Linux clients do not support them.

Sign in to participate in the conversation
social.device5.co.uk

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!