When I said that your discord clone doesn’t need e2ee, I got a lot of comments along the lines of “ then how would I use it to organize the revolution!” The answer is: you don’t. If you have more users than can comfortably share a Signal chat and hence want to use discord or something like it, you cannot POSSIBLY be vetting all of them to a high standard of trust. Your logs ARE leaking. End-to-end encryption between more people than can fit around a dinner table is pointless.

This article confirms what I already assumed, that “open source [information sense, not code sense] intelligence gathering on social media” includes, for the US government, asking for links to join groups that may *feel* private. My own discord has literally like a thousand idlers. It would be very *lucky* if none of them were logging for potentially nefarious purposes! And I remind the active users of this occasionally.

https://www.kenklippenstein.com/p/exclusive-ice-masks-up-in-more-ways

Exclusive: ICE Masks Up in More Ways Than One

Feds could be in your group chat

Ken Klippenstein
@0xabad1dea Reminds me that I sometimes wonder who created this idea that we should encrypt everything, because as more and more time passes it more feels like a way to make people feel safer than they are, and weaken protocols.

If not entirely make things actually unsafe for people if it ends up with verifiable signatures which can't end up plausibly deniable (one reason why I have rotation on my dkim keys).

@lanodan @0xabad1dea Because the idea that you can solidify insecure protocols by eliminating the steps you use to secure them externally turns out to be lunacy that doesn't even begin to work.

These keys you make for these purposes can be generated on the fly on your computer without any involvement by others. There's no reason to post things to the same handle in a validated manner if you can just invent new handles on the fly. No more trying "anonymous-douch-317" and finding that taken.