1,585 karma · joined January 6, 2013
You paid for that.
Could an admin please change the link to point at their technical whitepaper instead of this content-free solicitation to participate in a funding round that conveniently opens 5 days from now?
> “But there’s a whole slew of folks that can be tempted because what happens if I offer you, say, three months’ salary?’ In some cases we’ve seen up to a year’s worth of salary being rewarded for stealing product out of the factory.” Apple workers on the production line make approximately $350 a month, not including overtime, according to a 2016 report from China Labor Watch.
Duh. If you give valuable intelligence to workers who are paid a pittance, that info is inevitably going to find its way into the hands of people who are willing to pay a pretty penny for it. Good luck to anyone who hopes to address that without altering the economics of the situation.
I'm in the alpha stage of building an end-to-end encrypted social network (https://sharewithsup.com, invite code: eff, currently iPhone only). Under the hood, it establishes E2E group channels between friends and uses those for everything (posts, comments, photos, events, etc). History is relayed between friends and search uses a local index, but the UX is still similar to Facebook. My point is - in addition to namedropping my app - that it's possible to find ways to implement features that at first seem hard with E2E. Just not on the web, yet.
On the other hand, they did make the iPhone, so I guess this is a lesson to project managers and executives that death marches do occasionally pay off.
With his reply, Durov is implicitly claiming that Signal must be compromised because it received some funding that can be traced back to the US government. This is the same kind of FUD that has often been used to smear Tor in the past (and indeed, the piece he cites describes Tor as "a federal weapons contractor" and "a foreign policy weapon, a soft power cyber weapon").
[1] https://twitter.com/durov/status/872891017418113024
[2] https://surveillancevalley.com/blog/government-backed-privac...
I do. It's not OK to do immoral things just because someone is paying you to do them.
Can anyone recommend reading material for a founder who wants to get these things right from the start? Is there a definitive guide to creating an environment where engineers can thrive?
> It could’ve been a colleague because I know there is a backdoor way to send emails using someone else’s account via some sort of a SQL database thing. We used to do it as jokes but it was never used for something like this
That in particular is setting off my troll radar.
The final paragraph says it all:
> BA has said little so far about what went wrong. However, it will now be under pressure from investors, staff and passengers to provide some answers.
BA should be under pressure from you to provide answers. That's your job.
When you post, the content is sent as an encrypted message that can only be decrypted by people who should be able to see it (either all of your friends or just a subset of them). The client automatically takes care of key management and is responsible for keeping track of sent & received posts, comments, etc; it renders a news-feed-like UI on top of that data. The end result is a familiar UX on the surface, but the underlying mechanism for transmitting data between users is far more secure than the traditional approach of using a monolithic database that contains everyone's data in plaintext.
> If things are encrypted, how are you going to determine relevance, etc.
The client is solely responsible for that. For now the "news feed" is strictly chronological, but I plan to augment it later by prioritizing posts that might be particularly interesting to the user. There are plenty of ways to make those decisions locally.