TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Briar Project

350 点作者 fishmaster将近 5 年前

14 条评论

placebo将近 5 年前
In an authoritarian regime with large masses of human and technological resources determined to have control over its population, nothing is really secure. Sending a message that can't be read by a third party? You're suspect. Have an illegal app installed on your registered "report to big brother" phone? Expect an unfriendly visit by big brother police. Don't have a "big brother" phone? There are various ways of sniffing you out. The bottom line is that while technology can help in the process, technology can't bring freedom from oppressing regimes. That is only achieved when a synchronised, large enough collection of people feel that they are willing to change things even at great personal risk. Authoritarian regimes know this, and thus put a lot of effort into using fear of consequences to suppress any hint of such development.
评论 #24034764 未加载
评论 #24032833 未加载
评论 #24035787 未加载
评论 #24033557 未加载
评论 #24033523 未加载
评论 #24035230 未加载
评论 #24034734 未加载
dunefox将近 5 年前
I&#x27;ve been looking for secure messengers during the last few weeks. I use WhatsApp, Signal, and Telegram. Telegram isn&#x27;t very secure, WhatsApp is owned by Facebook and even Signal - while very secure - requires a cell phone number... Briar seems great in this regard but isn&#x27;t available on iPhone and has no support for images, calls, voice messages, etc. Apparently they&#x27;re going to support images and a desktop client, though.<p>In short, I just don&#x27;t know what to use.<p>Edit: Session looks great but is not fully released yet: <a href="https:&#x2F;&#x2F;getsession.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;getsession.org&#x2F;</a> This might be what I&#x27;m looking for in the future.
评论 #24032398 未加载
评论 #24034741 未加载
评论 #24032431 未加载
评论 #24034101 未加载
评论 #24032950 未加载
评论 #24032444 未加载
评论 #24032175 未加载
评论 #24032189 未加载
评论 #24034738 未加载
评论 #24034576 未加载
评论 #24033954 未加载
评论 #24035118 未加载
评论 #24032422 未加载
评论 #24032200 未加载
timeout_in_5将近 5 年前
Briar Project (and other projects like Signal and Tor) are funded by Open Technology Fund.<p>OTF is being killed by the current US government and this will affect all projects!<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Open_Technology_Fund" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Open_Technology_Fund</a><p><a href="https:&#x2F;&#x2F;saveinternetfreedom.tech&#x2F;" rel="nofollow">https:&#x2F;&#x2F;saveinternetfreedom.tech&#x2F;</a><p><a href="https:&#x2F;&#x2F;saveinternetfreedom.tech&#x2F;updates&#x2F;" rel="nofollow">https:&#x2F;&#x2F;saveinternetfreedom.tech&#x2F;updates&#x2F;</a>
askxnakjsn将近 5 年前
Now that I think about it, why aren&#x27;t most messaging apps peer to peer? Shouldn&#x27;t that be the standard? I mean it&#x27;s literally the point of messages: sending from one person to another.
评论 #24032148 未加载
评论 #24032283 未加载
评论 #24032120 未加载
评论 #24032133 未加载
dzink将近 5 年前
I don’t have an answer, but a slightly different perspective. Many different segments have a deep interest in using highly secure encrypted communications: politicians working on deals within&#x2F;between governments (that should be auditable, but many try to avoid that), whistleblowers, organizers operating in adverse governments, dissidents, terrorists, pedophiles with a lot to lose (similar to Epstein’s network), healthcare professionals trying to talk to patients or other doctors in a hippa world, illegal transaction networks, attorneys with clients, VCs trying to debate the future of the world, companies trying to preserve trade secrets, you name it. It takes one of the egregious bad actors using the system to commit a crime worthy of public attention before the entire system is justifiably unpacked, banned, or considered a signal of bad intentions.<p>How can a system be made decentralized, but able to self-police against legitimately, publicly agreed upon bad behavior? If the system is able agree upon and exclude legitimately bad behavior automatically, the governments would not have a claim upon needing to police it and regular users would probably find it beneficial as well.<p>How could the self policing possibly happen?<p>Maybe you have a blockchain of anonymized encrypted messages that is read by open source scanning bots - if enough independent bots flag a message, then a group of anonymous judges can adjudicate to ban those user accounts?<p>Encryption is one challenge, but if you want true ubiquitous privacy, you need to deliver internal safety to prevent the need for external policing of activity. Social creatures of any species from dolphins to macaques have evolved some kind of internal behavior policing mechanism or trust is lost, and as such the system of value exchange grinds to a halt.
评论 #24034598 未加载
评论 #24034417 未加载
评论 #24041580 未加载
评论 #24034701 未加载
ris将近 5 年前
What I don&#x27;t understand about Briar is how it can <i>scale</i>. Surely it can&#x27;t know ahead of time <i>which</i> users are going to &quot;travel to another part of town&quot; and should therefore have messages pre-loaded onto their devices. Therefore to me this <i>seems</i> like it must use some kind of broadcast delivery model and so would be vulnerable to flooding attacks.<p>Edit: seems there are <i>some</i> thoughts about this already <a href="https:&#x2F;&#x2F;code.briarproject.org&#x2F;briar&#x2F;briar&#x2F;-&#x2F;issues&#x2F;511" rel="nofollow">https:&#x2F;&#x2F;code.briarproject.org&#x2F;briar&#x2F;briar&#x2F;-&#x2F;issues&#x2F;511</a>
foresto将近 5 年前
Earlier this year, I finally took the time to revisit the state of instant messaging services. My requirements:<p>- open source<p>- cross-platform (linux, mac, windows, ios, android)<p>- group chats<p>- end-to-end encryption<p>- well-understood crypto ciphers &amp; protocols<p>- mature enough for a reasonable expectation of security &amp; privacy<p>- easy enough for most computer users<p>- some way to protect metadata (e.g. self-hosting)<p>- signup without real-world ID<p>- offline message delivery<p>I ended up choosing the Matrix network. The reference client is called Element[1] (formerly Riot). There are things I dislike about the client, but they&#x27;re pretty minor compared to the benefits of the underlying protocol, and lots of alternative clients are in development[2][3].<p>On top of meeting my requirements, all signs indicate that development is both active and moving in the right directions. Reading the team&#x27;s weekly reports and issue tracker convinced me that they are making very sound decisions.<p>[1]: <a href="https:&#x2F;&#x2F;element.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;element.io&#x2F;</a><p>[2]: <a href="https:&#x2F;&#x2F;matrix.org&#x2F;clients-matrix&#x2F;" rel="nofollow">https:&#x2F;&#x2F;matrix.org&#x2F;clients-matrix&#x2F;</a><p>[3]: <a href="https:&#x2F;&#x2F;matrix.org&#x2F;clients&#x2F;" rel="nofollow">https:&#x2F;&#x2F;matrix.org&#x2F;clients&#x2F;</a><p>Here&#x27;s what I didn&#x27;t like about the others:<p>Briar: Lacked cross-platform support and (iirc) offline messaging. Tor brings baggage that not everyone is ready to accept.<p>Cwtch: Not mature yet.<p>Jami: Very fragile code base in my experience, which was also true when was called Ring, and when it was called SFLphone. Only about 25% of the builds I&#x27;ve tried over the years actually worked. I was unable to determine whether it had offline messaging.<p>Keybase: Now owned by Zoom, which is a privacy nightmare.<p>Ricochet: Same problems as Briar.<p>RocketChat: Crypto is not mature yet.<p>Session: Not mature yet. Small limit on number of group chat participants.<p>Signal: Required phone number for signup. Required Google Play Services (aka spyware) for quite a long time. Weak cross-platform support. Some of that is finally changing, but Moxie will surely make more intolerable design decisions, and refuse to fix them for years, again.<p>Telegram: Homebrew crypto.<p>XMPP: Most clients are hard to use (or to teach others to use). Good servers are hard to find. Protocol standards are a mess. I couldn&#x27;t find a real-world e2ee group chat implementation.<p>Everything else: Failed to meet my requirements even before I looked closely, mostly due to closed code and&#x2F;or problematic corporate interests. (For example, I will not use an app from Facebook or any of its subsidiaries.)
评论 #24038059 未加载
评论 #24034478 未加载
评论 #24036632 未加载
评论 #24038673 未加载
gorgoiler将近 5 年前
Support for a TEMPEST mode of communication would be a killer feature. Perhaps vibrate mode on one phone being picked up by the accelerometer of another?<p>In our hypothetical dystopian future <i>The Regime</i> will probably jam 2Ghz to 5Ghz in public spaces. TEMPEST mode would also force them to install vibrators into all coffee shop tables.
评论 #24036642 未加载
评论 #24034564 未加载
szundi将近 5 年前
Since they are on their phones via factory rootkit, good luck.
ergwwrt将近 5 年前
Use of wifi during blackout? Wifi does not work during wifi. Only over the air comms are secure. Any wired connaction is tapped
评论 #24038163 未加载
lostgame将近 5 年前
Oh; wow. Not all heroes wear capes. Install <i>now</i>!
xwdv将近 5 年前
What the fuck ever happened to communicating through plain old radios? Impractical for someone to track you, trivial to speak in codes.
评论 #24034083 未加载
评论 #24038151 未加载
r41nbowdash将近 5 年前
many of my friends are activists, and i&#x27;m hesitant to disclose to them which technologies they could use. 95% chance they&#x27;re going to use it for getting drugs, or avoid monitoring to organize gatherings, which, without law enforcement protection always have potential to turn violent. i just don&#x27;t want to take responsibility for these actions.<p>then you have heavy stuff, people trafficking, bomb threats, suicide threats, organ trade, child abuse, and crypto seriously limits the options for a response. as long as we&#x27;re talking about functioning democracies, it does more bad than good.
User23将近 5 年前
Criminal conspiracy as a service. I don’t think I’d invest my money.<p>Edit: to clarify their marketing is transparently targeting organizers of street violence. I have no problem with encryption and don’t think government forbidding it is a good idea.
评论 #24038110 未加载
评论 #24033601 未加载
评论 #24039599 未加载
评论 #24034349 未加载