Hacker News Reader

Comment by BoumTAC | Hacker News Reader

Even wikipedia say it's founded by the governement ...

As of October 2016, the project has received an unknown amount of donations from individual sponsors via the Freedom of the Press Foundation.[100] Open Whisper Systems has received grants from the Knight Foundation,[101] the Shuttleworth Foundation,[102] and the Open Technology Fund,[103] a U.S. government funded program that has also supported other privacy projects like the anonymity software Tor and the encrypted instant messaging app Cryptocat.

https://en.wikipedia.org/wiki/Signal_(software)

View on HN

The tweet he was replying to said: "I've heard various reports from people I trust that Signal is compromised. Any comments/thoughts/reliable rumors?"

With his reply, Durov is implicitly claiming that Signal must be compromised because it received some funding that can be traced back to the US government. This is the same kind of FUD that has often been used to smear Tor in the past (and indeed, the piece he cites describes Tor as "a federal weapons contractor" and "a foreign policy weapon, a soft power cyber weapon").

That fits the profile of a conspiracy theory.

Assume without thinking that conspiracy theory equals false -> you watch too much TV.

Funded by the government != The government has their hands all over it

Even TOR was originally a government funded project

Even "the Internet" was originally a government funded project

and yeah, currently Internet is a spying tool of USA.

It's a spying tool for American corporations far more than it is one for the government.

It's a spying tool for American corporations which is very convenient for the government

And TOR is no longer (was it before, I don't know) a secure tool.

It still gets a large portion of its funding from the USG

And there's lots of Tor posters hung up at USG labs (e.g., https://www.torservers.net/wiki/_media/tor-relay-poster.resi...). I was pretty surprised, at first

Tor has probably saved more than a few CIA agents' lives, not to mention free access to the Internet being a powerful tool for undermining authoritarian regimes.

> Tor has probably saved more than a few CIA agents' lives

Tor's main purpose is to allow agents of US intelligence agencies to communicate back with the home base.

"Giving free access to the Internet being a powerful tool for undermining authoritarian regimes" makes it harder for an adversary to focus solely on intelligence agency agent traffic.

I'm not saying Tor is backdoored or monitored, though it's heavily monitored.

When enjoying the benefits of Tor, it's wise to also remember Tor's main purpose.

Exactly, the government is extremely large and not all the NSA. Sometimes the left hand doesn't know what all the thousands of right hands are doing and can't possibly care.

To some extent that's even true within the NSA.

The internet is a government conspiracy!

The government is a government conspiracy!

...wait.

There's a crazy logic to this that I appreciate.

Yes, OWS received funding from the US government via the Open Technology Fund, which is organized under Radio Free Asia.

I assume that "founded" is a typo, but to be clear, there is no evidence that the US government either encouraged the creation of OWS or contributed any actual work/code to OWS.

The conspiracy-theory part here is that taking funding from the US government (any part of the US government, whether the NSA or Radio Free Asia) means that your protocols or your implementations have backdoors, even if those protocols and the source code implementing them are public and well-reviewed.

Supporting Cryptocat only makes sense if they don't do due diligence or if they're trying to subvert security.

I worked on the OTF-funded security audit of Cryptocat. (The report: https://leastauthority.com/static/publications/LeastAuthorit...) While I wasn't involved in arranging the work, my vague memory is that a publically-disclosed audit was a condition of the funding -- I think the OTF had that policy in general. (It's been a few years, and I haven't kept up.)

Even the author of CryptoCat now thinks you should not use CryptoCat, but I would not rush to assume ill of the OTF funding it back then.

> Even wikipedia say it's founded by the governement ...

I bet you meant to type "funded".

Most of the funding for the foundation that funds Wikipedia comes from small donations from users.

For all we know, Signal itself could be one big CIA operation. It wouldn't be beyond their capabilities. But at least the protocol and encryption are open source.

Reply on news.ycombinator.com