Moxie Marlinspike @moxie Twitter profile

Last Seen Profiles

@t_zunko

@east_youngin21

@shfnyu

@gakujuren

@rrutoe

@tanakayoshikazu

@cidneK

@AlessandraTV_

@BrendanSAfrica

@lapetite_momo

@YIZHANForeverTH

@Joide8

@R_u_90

@AstatiumAt

@Thisguyhasnojob

@ChristianR_DK

@JumiaNigeria

@Shiben_c16e4

@gabbegomezzz

@Bylbyleva

@stakewolle

@I_LoveTrans

@haossence

@Jasiri_9line

@sketchymyg

@useteller

@IBallLikeMelo_

@for_my__love__

@xc_field

@blanketcrap

@nishimuraikemen

@LoveTEFL

@OzKinkFestAu

@tvwestUG

@Julesheningburg

@haku_mai_desyoo

Moxie Marlinspike

@moxie

2 years

Wrote some notes summarizing my first impressions of web3:

My first impressions of web3

Despite considering myself a cryptographer, I have not found myself particularly drawn to “crypto.” I don’t think I’ve ever actually said the words “get off my lawn,” but I’m much more likely to...

moxie.org

1K

7K

28K

Moxie Marlinspike

@moxie

3 years

Signal tried to use Instagram ads to display the data Facebook collects about you and sells access to. Facebook wasn't into the idea, and shut down our account instead:

171

7K

21K

Moxie Marlinspike

@moxie

2 years

Telegram is the most popular messenger in urban Ukraine. After a decade of misleading marketing and press, most ppl there believe it’s an “encrypted app” The reality is the opposite-TG is by default a cloud database w/ a plaintext copy of every msg everyone has ever sent/recvd.

Moxie Marlinspike

@moxie

2 years

It's amazing to me that after all this time, almost all media coverage of Telegram still refers to it as an "encrypted messenger." Telegram has a lot of compelling features, but in terms of privacy and data collection, there is no worse choice. Here's how it actually works: 1/

230

3K

9K

281

4K

12K

Moxie Marlinspike

@moxie

2 years

It's amazing to me that after all this time, almost all media coverage of Telegram still refers to it as an "encrypted messenger." Telegram has a lot of compelling features, but in terms of privacy and data collection, there is no worse choice. Here's how it actually works: 1/

230

3K

9K

Moxie Marlinspike

@moxie

4 years

Friend in California (unsuccessfully) trying to get a test for coronavirus. DPH: "Have you been to any countries experiencing an outbreak of coronavirus in the past two weeks?" Friend: "Yes, the USA."

47

1K

8K

Moxie Marlinspike

@moxie

2 years

It's a new year! I've decided it's a good time to replace myself as the CEO of Signal:

New year, new CEO

It’s a new year, and I’ve decided it’s a good time to replace myself as the CEO of Signal. I have now been working on Signal for almost a decade. It has always been my goal for Signal to grow and...

signal.org

402

753

7K

Moxie Marlinspike

@moxie

3 years

A few months ago Cellebrite announced that they would begin parsing data from Signal in their extraction tools. It seems they're not doing that very carefully. Exploiting vulnerabilities in Cellebrite's software, from an app's perspective:

Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective

Cellebrite makes software to automate physically extracting and indexing data from mobile devices. They exist within the grey – where enterprise branding joins together with the larcenous to be...

signal.org

101

2K

6K

Moxie Marlinspike

@moxie

4 years

First look at Apple/Google contact tracing framework: 1) Once a day, your device derives a new key ("daily tracing key"). 2) It uses that to derive a new "proximity ID" every time your device's bluetooth address changes (15min), which is broadcast to nearby BT sensors. 1/10

79

2K

4K

Moxie Marlinspike

@moxie

3 years

If you've ever considered applying to work with us at Signal, now is a great time to get involved! We're just over here working on a plan to power the western hemisphere with the heat from our servers:

Careers

Join an organization that empowers users by making private communication simple.

signal.org

Signal

@signalapp

3 years

How it started vs how it's going 😅

1K

5K

46K

178

768

4K

Moxie Marlinspike

@moxie

3 years

As the influx to Signal continues, huge props to the entire small non-profit team at @signalapp working late nights and weekends to keep Signal running, answer support inquiries, and keep making Signal better for everyone interested privacy and a different kind of tech.

55

374

3K

Moxie Marlinspike

@moxie

5 years

What the Kurds want from Turkey is so incredibly minimal at this point—to be able to speak their own language, have their own radio programs, teach their children about their culture. For this, Turkey is willing to cross into Syria and kill them all.

75

1K

3K

Moxie Marlinspike

@moxie

2 years

I spent some time last spring contemplating the utopian fantasy of how to build a quiet electric leaf blower. After making a few prototypes, I now believe that another world is possible. A world where the leaf blower's shrill whine has been transformed into a gentle whoosh.

214

284

3K

Moxie Marlinspike

@moxie

2 years

Actual privacy tech is not about trusting someone else w/ your data. It's about not having to. A msg you send should only be visible to you & recipient. A group's details should only be vis to the other members. Looking up your contacts should not reveal them to anyone else. 7/

15

272

2K

Moxie Marlinspike

@moxie

3 years

I created an NFT, but the image renders differently based on who's looking at it. For example, on OpenSea: ...vs on Rarible: ...vs if you own it, it currently renders as a large 💩 emoji in your wallet. How this works: 1/n

At my whim, #1

You may own (?) the results of this function call, but I own the function

rarible.com

64

630

2K

Moxie Marlinspike

@moxie

3 years

Anyone else think it's weird that we've organized an economy where we're all doing whatever it is we're doing instead of helping with production and distribution of vaccines that could end a global year long pandemic which has negatively affected almost everyone everywhere?

87

274

2K

Moxie Marlinspike

@moxie

2 years

For the folks writing about this space, my request is that when you write "encrypted messenger," it should at *minimum* mean an app where all messages are e2ee by default. Telegram and FB Messenger are built exactly the same way. Neither are "encrypted messengers." 9/

80

197

2K

Moxie Marlinspike

@moxie

2 years

Here's a simple test: delete Telegram, install it on a brand new phone, and register with your number. You will immediately see all your conversation history, all of your contacts, all the media you've shared, all of your groups. How? It was all on their servers, in plaintext 3/

49

239

2K

Moxie Marlinspike

@moxie

2 years

Telegram stores all your contacts, groups, media, and every message you've ever sent or received in plaintext on their servers. The app on your phone is just a "view" onto their servers, where the data actually lives. Almost everything you see in the app, Telegram also sees 2/

27

298

2K

Moxie Marlinspike

@moxie

19 days

As a kid, the magic of software was that I could sit down and make something with no license, degree, or ~money. Gotta say, publishing an iOS app from scratch today is a verrry diff vibe. I wonder how many young people's ideas we've lost at "and now register for a DUNs number."

83

233

2K

Moxie Marlinspike

@moxie

2 years

Every msg, photo, video, doc sent/received for the past 10 yrs; all contacts, group memberships, etc are all available to anyone w/ access to that DB Many TG employees have family in Russia. If Russia doesn’t want to bother w/ hacking, they can leverage family safety for access.

56

252

2K

Moxie Marlinspike

@moxie

3 years

Rough couple of days! Thanks everyone for being so supportive, and to everyone who reached out. Really nice to come back here after all that and see so many words of encouragement, and so sweet to hear the stories of what it felt like to be "without signal" online for a while.

Signal

@signalapp

3 years

Signal is back! Like an underdog going through a training montage, we’ve learned a lot since yesterday — and we did it together. Thanks to the millions of new Signal users around the world for your patience. Your capacity for understanding inspired us while we expanded capacity.

1K

4K

42K

46

168

2K

Moxie Marlinspike

@moxie

4 years

Many trends in modern programming language design seem to focus on developers pressing fewer keys on the keyboard. To me, that's a strange priority. For large systems where the industry spends most of its time, I think "readability" is much more important than "writability." 1/5

74

385

2K

Moxie Marlinspike

@moxie

2 years

Some may feel okay letting Telegram have access to all of their data, msgs, images, contacts, groups, etc. because they "trust Telegram." However, the point of an "encrypted messenger" should be that you don't have to trust anyone other than the ppl you're communicating with 6/

6

151

2K

Moxie Marlinspike

@moxie

3 years

Update: my NFT was removed by OpenSea without warning or explanation. I don’t see any terms it violated? No problem, this is web3 right? But the NFT also disappeared from my crypto wallet! Why? Because MetaMask just calls the OpenSea API. Loving the decentralized future so far..

154

327

2K

Moxie Marlinspike

@moxie

4 years

I still run Linux. It's obv bad, but I always assumed everyone on mac was living in some fantasy land where things work I've spent some time in the Apple world lately, and have been shocked by how wrong I was. Can't believe yall have also been putting up with this for past 25yrs

143

185

2K

Moxie Marlinspike

@moxie

4 years

We're allowed to go outside for exercise, but the beaches are closed and they're arresting people on boards in the water. So I got a pair of rollerblades, and every night after work I roll through the empty California streets while blasting the soundtrack from the movie Hackers.

54

172

2K

Moxie Marlinspike

@moxie

3 years

Snowden has been in asylum for 8yrs, cut off from the country he cares about so much he was willing to risk his life in prison for it. Trump twice hinted at a pardon. Imagine knowing all it could take to finally be free is to publicly flatter Trump. And choosing integrity. Again

1

195

2K

Moxie Marlinspike

@moxie

2 years

FB Messenger also has an e2ee "secret chat" mode that is actually much less limited than Telegram's (and also uses a better e2ee protocol), but nobody would consider Messenger to be an "encrypted messenger." FB Messenger and Telegram are built almost exactly the same way. 5/

7

132

2K

Moxie Marlinspike

@moxie

2 years

Privacy tech is really about making the tech consistent with the UI. But if Telegram's UI were consistent with the way the tech worked, every chat would be a group chat with everyone that works at Telegram + everyone that hacks Telegram + every gov that accesses Telegram, etc 8/

17

120

1K

Moxie Marlinspike

@moxie

2 years

The confusion is that Telegram does allow you to create very limited "secret chats" (no groups, synchronous, no sync) that nominally do use e2ee, even if the security of the e2ee protocol they use is dubious. There's no e2ee by default, but they talk about it like there is 4/

6

123

1K

Moxie Marlinspike

@moxie

5 years

Every time someone like #WilliamBarr talks about making Signal illegal, I'm like "damn, I wish I could read his Signal messages."

22

367

1K

Moxie Marlinspike

@moxie

2 years

@elonmusk Signal is designed very differently. All communication is e2ee, so there is no cloud DB with everyone’s entire plaintext msg history in it. Groups are encrypted by default, so the only ppl who know group details are the people in them. Same w/ contacts, calls, social graph, etc.

40

97

1K

Moxie Marlinspike

@moxie

4 years

A friend in California just got an invite to an indoor birthday party happening next week. Five hundred people were invited, 90+ have already RSVPd, and the invite included the phrase "because love = immunity." So... anyone else considering leaving the country at this point?

80

89

1K

Moxie Marlinspike

@moxie

4 years

Remember in 2011 when Bitcoin was $10, one of the only things you could buy were alpaca wool socks, and everyone was getting socks for the novelty of using cryptocurrency? Has anyone checked in on the alpaca people? Like what happens after unexpectedly making 100MM on socks?

33

100

1K

Moxie Marlinspike

@moxie

4 years

Now that Giphy has been acquired by FB, many have reached out to ask whether we should be concerned about Giphy search in Signal. Signal already uses a privacy preserving approach to prevent gif search providers from receiving user data:

Expanding Signal GIF search

Today’s Signal beta for iOS includes support for animated GIF search. Signal iOS has long supported sending and receiving GIFs, but today’s beta adds support for browsing and searching popular GIFs...

signal.org

28

345

1K

Moxie Marlinspike

@moxie

2 years

I rarely have much use for ML, but I made a chrome extension that auto-blocks anyone with laser eyes in their Twitter avatar and I gotta say that so far it really seems to improve the experience!

192

49

939

Moxie Marlinspike

@moxie

3 years

Anyone who's been to a protest in DC knows the city is an extremely well rehearsed and brutal machine for suppressing street action. This is not the first time someone has thought of a capitol occupation, but it is impossible w/ normal tactics when they don't want it to happen.

Matt Laslo

@MattLaslo

3 years

They breached the Capitol

1K

6K

14K

15

325

935

Moxie Marlinspike

@moxie

4 years

I've had a bunch of discussions with people here about Signal PINs over the past day. I don't usually spend this much time on Twitter, so parallel to the direct discussion, these are a few of the adjacent thoughts that have come up for me: 1/14

38

301

902

Moxie Marlinspike

@moxie

3 years

NFT image data is not on-chain (too costly). Instead, what's on-chain is just a URL that *points* to the image. But surprisingly, there is no hash commitment in the NFT for the image at the URL. This means whoever controls the URL host can change the NFT image at any time. 2/n

26

119

848

Moxie Marlinspike

@moxie

1 year

One unique thing about software as an engineering discipline is that it offers abstractions which allow ppl to start contributing in the field w/o having to understand the whole field. To be great, though, imo understanding what’s under the abstractions is really important: 1/

52

149

812

Moxie Marlinspike

@moxie

16 days

I made this last weekend to experiment w/ building an app end to end on LLMs: It's like Wirecutter, but uses an LLM to recommend product choices based on reddit conversations and reviews, so you don't have to spend 20-30min reading reddit My experience:…

Vibe Check

Finding the best __

vibecheck.market

81

107

810

Moxie Marlinspike

@moxie

2 years

Since my last NFT was banned, I made another NFT and dApp. This time for autonomous art: It's a collective work. Anyone can mint a token for it by making a visual contribution, and the price to mint is paid to all previous contributors.

Autonomous Art

An NFT anyone can mint by making a visual contribution to a collective work.

autonomous.graphics

105

100

726

Moxie Marlinspike

@moxie

5 years

I'm continually amazed by how bad Facebook's brand has become. If the future of social networking really is privacy, then FB is doomed; no matter what they do or how they do it, nobody will believe. Their brand is now up there with some of the all-time worsts, closing in on Exxon

38

161

715

Moxie Marlinspike

@moxie

3 years

My NFT simply does this by default. It renders differently based on the IP/UA of the request, so the NFT image data isn't ever consistent, and what you bid on isn't what you get. This is how ERC721 is setup, though, not something unique to this NFT Good luck to all bidders! 4/n

20

23

719

Moxie Marlinspike

@moxie

8 years

WhatsApp has finished integrating the Signal Protocol into their app. End to end encryption for everyone by default:

WhatsApp's Signal Protocol integration is now complete

At Open Whisper Systems, our goal is to make private communication simple. A year ago, we announced a partnership with WhatsApp and committed to integrating the Signal Protocol into their product,...

signal.org

37

739

693

Moxie Marlinspike

@moxie

4 years

Just saw a ~75 year old couple out for a nice walk on a sunny day. They were holding hands, and in their free hand each of them was holding... a hammer. Got the distinct feeling that they'd seen the video of police hospitalizing that 75 year old man. The elderly are on notice.

21

73

693

Moxie Marlinspike

@moxie

4 years

I know multiple people with covid19 symptoms who've been unable to get testing. Everyone thinks the US is incompetent, but in a way it's kind of genius: USA can't have a coronavirus problem if USA never tests anyone for coronavirus.

40

117

666

Moxie Marlinspike

@moxie

2 years

And today is my last day as CEO! Huge thanks for everyone who has been there along the way. The team, the early adopters, the translators, the sustainers, friends with sage advice, and all the folks offering kind words. So excited for what Signal will be in the next 10 years!

50

30

662

Moxie Marlinspike

@moxie

2 months

When I was younger, it felt like half the ppl I knew survived by being in medical studies as their source of income. As a result, I sometimes have difficulty taking study outcomes seriously! Because let me tell you, ~nobody getting paid to be in studies is telling the truth.…

34

132

653

Moxie Marlinspike

@moxie

3 years

Looking at popular NFTs, there are tokens trading for crazy $$ where the NFT image comes from a random VPS running Apache. The VPS admin, or anyone who controls the domain name, can change the NFT image/name to render as 💩 (or whatever) at any point w/o owning the token. 3/n

9

56

600

Moxie Marlinspike

@moxie

4 years

When I was little, I would look at the tabloids while standing in the grocery line. Aliens, reptilians, etc. Imagine if those idle glances changed the other content I saw in the world to be similar, in a continual feedback loop until everything around me was tabloid headlines.

13

148

605

Moxie Marlinspike

@moxie

3 years

A lot of effort has gone into making private groups possible, where even Signal doesn't know about your groups, members, or messages. It's so encouraging to see people finding value in the potential for a different kind of tech that can work for you instead of for your data.

21

91

583

Moxie Marlinspike

@moxie

3 years

Also, really sorry about this! We're super focused on making sure we keep up with the migration to Signal that's happening in so many places around the world, and are working hard to make sure it goes more smoothly than yesterday 😬

38

28

575

Moxie Marlinspike

@moxie

2 years

Signal has no data to sell, no advertisers to sell it to, no investors to benefit from such a sale. As a nonprofit, the sole beneficiaries of Signal are the people who use it, so it is up to the people using Signal to sustain it:

Become a Signal Sustainer

Signal has no data to sell, no advertisers to sell it to, and no shareholders to benefit from such a sale. We’re building a different kind of tech – where your data stays in your hands – but we’re...

signal.org

72

165

568

Moxie Marlinspike

@moxie

3 years

We'll continue working to push this limit for friend-to-friend encrypted voice/video calls higher.

Signal

@signalapp

3 years

We just raised the group call limit from 5 to 8, so now you can call it even.

954

4K

39K

32

45

542

Moxie Marlinspike

@moxie

2 years

@CJHandmer 😂

7

2

544

Moxie Marlinspike

@moxie

3 years

This is the shadow form of "zero rating." FB has a huge advantage when so many devices ship w/ settings that enable FB, but break Signal. Right now if you install Signal on a common phone in Africa, you prob won't receive messages. Messenger/WA are on an allow list and work fine

Signal

@signalapp

3 years

We've discovered that @tecnomobile devices (some of the most popular phones in Africa) enable notifications for @Facebook apps like @WhatsApp , but block Signal notifications by default. Privacy should be the default. @TecnoMobileGH @TECNOMobileNG @TECNOMobile254 @TECNOMobileUG

63

268

2K

26

174

524

Moxie Marlinspike

@moxie

8 years

There's really something to be said for the Russian approach to customer service. Makes me smile every time I'm here

12

313

525

Moxie Marlinspike

@moxie

4 years

All that aside, these APIs are novel in terms of what becomes possible from the app layer. I'm not super optimistic about opt-in contact tracing becoming a major factor, but I do kind of anticipate that someone will end up using this for some other interesting thing.

39

63

518

Moxie Marlinspike

@moxie

2 years

Looks like there’s some chance Facebook might have to sell WhatsApp. Soooo just out of curiosity, what’s all this I keep hearing about DAOs? 😂

A new ruling on Meta antitrust accusations could mean selling Instagram and WhatsApp

Could we be nearing the end of half a century of relaxed policy toward horizontal mergers that led to the proliferation of these tech behemoths with trillion-dollar market caps?

fortune.com

49

62

499

Moxie Marlinspike

@moxie

3 years

@JaredPersinger This (was!) an article about "advanced techniques" Cellebrite uses to decode a Signal message db... on an *unlocked* Android device! They could have also just opened the app to look at the messages. The whole article read like amateur hour, which is I assume why they removed it.

16

101

502

Moxie Marlinspike

@moxie

11 years

Government surveillance, and why we should all have something to hide: http://t.co/ZsVDx0SeFQ

30

481

453

Moxie Marlinspike

@moxie

4 years

I've run Linux for ~25yrs, out of habit or stubbornness. The biggest upside from that choice is probably an inadvertent one: no games. The last game I played was ~duke3d. If I hadn't been on Linux, how much of my life might I have lost to EverQuest if I'd been able to run it?

39

42

472

Moxie Marlinspike

@moxie

2 years

@ID_AA_Carmack I think it's possible to make pretty quiet! I was wondering the same thing and made a couple of prototypes over the spring. Will try to put together a video demo.

13

10

470

Moxie Marlinspike

@moxie

3 years

omg this is amazing

MOSES - HIT ME ON SIGNAL (OFFICIAL MUSIC VIDEO) AT SPACEX HEADQUARTERS

Location: SpaceX Headquarters - Los Angeles, CAStream "Hit Me on Signal" on Spotify, Apple Music, and all of your favorite platforms!https://open.spotify.com...

www.youtube.com

29

86

467

Moxie Marlinspike

@moxie

4 years

@matthew_d_green Based on the feedback we've gotten about PINs, we're working on shipping an option to disable PINs for advanced users who are alright with losing their Signal contacts on reinstall.

40

111

452

Moxie Marlinspike

@moxie

5 years

Whenever I talk with people into chemtrails, flat earth, or other conspiracies, I'm struck by how appealing a worldview with a "them" must be. If only we could stop "them!" As dark as those worldviews are, it is perhaps darker if there is no "them." That this world is just... us.

26

90

431

Moxie Marlinspike

@moxie

1 year

Maybe there are better references now, but studying these early on has and continues to help me immensely. Abstractions are great for getting people contributing in the field quickly, but imo looking through the abstractions is hugely rewarding and will make you super effective.

22

11

168

Moxie Marlinspike

@moxie

4 years

It's getting close enough to summer that I can stay up and see the Milky Way rise before my bedtime.

12

49

418

Moxie Marlinspike

@moxie

2 years

Zaporizhia, the recent site of fighting at a nuclear plant, has an interesting history of resistance to state forces. It's the same region where Nestor Makhno's army fought the Red Army, White Army, and Ukrainian nationalists to maintain the anarchist Free Territory for 4 years.

1

122

380

Moxie Marlinspike

@moxie

1 year

@micsolana The entire countries of India, Brazil, etc. Many countries use stories in WhatsApp as their primary "social" platform, and have been clamoring for stories in Signal b/c they want to leave WhatsApp and still have a way to get updates from friends that don't demand a response.

19

42

407

Moxie Marlinspike

@moxie

4 years

Striking how curfew becomes a hyper expression of every-day selective enforcement. There's always a pretense for police to selectively target whoever they want. "Curfew" (1pm!) is same: a blanket pretense for selective targeting. Violating it will mean diff things for diff ppl.

CNN

@CNN

4 years

Curfews in Beverly Hills and Santa Monica, California, will start at 1 p.m. PT today for business districts and 4 p.m. PT citywide following a weekend of protests and looting. Follow updates:

349

2K

3K

6

112

389

Moxie Marlinspike

@moxie

2 years

Signal now supports 40 person group calls! This post details what's required to support end-to-end encrypted group video calls of that size. Building network apps has become increasingly straightforward, but this is still one area that is difficult and expensive to do well.

Signal

@signalapp

2 years

Signal now supports 40 person group calls. Building large end-to-end encrypted group calls required some new engineering. Learn how we did it here:

65

361

2K

16

57

394

Moxie Marlinspike

@moxie

4 years

Watching the intense videos of brave people taking to the the streets in Belarus, it's also chilling to notice that the balaclava-wearing cops suppressing election fraud protests in a naked police state appear less heavily armed, less trained, and less brutal than cops in the US.

16

85

390

Moxie Marlinspike

@moxie

4 years

Today I saw someone get removed from a grocery store for not wearing his mask in the store. Everyone else standing around had a kind of eye-roll "of course, what a fool this guy is" expression. Things always seem to become normalized much faster than they can go back to normal.

17

45

385

Moxie Marlinspike

@moxie

3 years

Lots of people asking how they should move their conversations to Signal today. Here's one idea, start with your existing groups by using Signal group links.

Signal

@signalapp

3 years

A lot of people have been asking how to move their group chats from other apps to Signal, and Signal group links are a great way to get started. Drop a group link into your former chat app of choice like you're dropping the mic on the way out.

241

3K

9K

18

109

380

Moxie Marlinspike

@moxie

2 years

@elonmusk More info here: …and much more on the blog. You can also see the data Signal has access to in subpoena responses here:

10

27

376

Moxie Marlinspike

@moxie

5 years

Scene report from the Chernobyl Exclusion Zone:

23

126

370

Moxie Marlinspike

@moxie

4 years

So it takes BTLE privacy a ~step back. I don't see why all of the existing beacon tracking tech wouldn't incorporate this into their stacks. At that point adtech (at minimum) probably knows who you are, where you've been, and that you are covid+.

6

70

359

Moxie Marlinspike

@moxie

4 years

Not to mention the "prank" aspect of being able to light up everyone you've been near's devices with "you've been exposed to covid" (without them knowing you're the culprit) at any time, without some kind of pretty heavy manual ID/result verification at the moment of reporting.

17

42

358

Moxie Marlinspike

@moxie

4 years

...what is "foo?" "The compiler can figure it out!" they say. But what I care about is whether someone looking at the code can figure it out. We're writing 3 fewer characters one time, at the cost of less information for the ~years people will have to read and understand it.

33

30

361

Moxie Marlinspike

@moxie

9 years

As a software developer, I envy writers, musicians, and filmmakers. Unlike software, when they create something it is really done, forever.

46

262

339

Moxie Marlinspike

@moxie

2 years

Damn. It’s so striking to me with Peter’s passing how much obviously worse off the world is without him. Ultimately the world isn’t very good at saying thank you outside of the market, but Peter definitely deserved our thanks, and I fear we may not have thanked him enough.

yan

@bcrypt

2 years

peter has just passed away. there are no words.

87

52

801

39

54

338

Moxie Marlinspike

@moxie

4 years

In the US right now, people are not wearing masks while committing crimes. That's the situation we're in.

10

50

330

Moxie Marlinspike

@moxie

9 years

Waking up to an inbox full of hate mail: this too could be your daily ritual if you decide to write OSS software and give it away for free.

53

197

323

Moxie Marlinspike

@moxie

4 years

Last summer, this is what I was wearing in the Chernobyl Exclusion Zone. Never would have imagined that, a year later, it’s what I would be wearing to the grocery store in California.

14

30

322

Moxie Marlinspike

@moxie

1 month

I've been helping with Juicebox, an open-source encryption key recovery system that provides high security coupled with a user-friendly design, to make encryption further accessible to larger numbers of people. Details on how it works:

Key to Simplicity: Squeezing the hassle out of encryption key recovery

Cryptography transforms the impossible task of safeguarding extensive data transmitted and stored across numerous systems and networks into the simpler task of securing a small singular key in one...

www.juicebox.xyz

8

73

300

Moxie Marlinspike

@moxie

11 years

A Saudi Arabia telecom tried to hire me to work on their state-run mobile data surveillance system: http://t.co/gjsLhz5sdN

93

1K

301

Moxie Marlinspike

@moxie

4 years

So first obvious caveat is that this is "private" (or at least not worse than BTLE), *until* the moment you test positive. At that point all of your BTLE mac addrs over the previous period become linkable. Why do they change to begin with? Because tracking is already a problem.

6

50

309

Moxie Marlinspike

@moxie

3 years

Kind of amazing this was only 3 years. I think everyone would have assumed "MS acquires GitHub" was the end for GitHub, but in many ways @natfriedman made it the beginning. Can't think of any other acquisition that yielded such a dramatic and immediate trajectory of improvement.

Nat Friedman

@natfriedman

3 years

BIG news! After an amazing three years at GitHub, I'm ready for my next adventure. Later this month, I'm passing the role of CEO to the very capable @ashtom :

198

375

4K

8

17

314

Moxie Marlinspike

@moxie

5 years

Visiting DEF CON for the first time in a long time, along with someone who had never been, I was mostly struck by how nice and welcoming everyone was. While probably still not a universal experience, I did get the feeling of a more self aware community that had focused on it.

15

18

310

Moxie Marlinspike

@moxie

4 years

Surprise surprise. Sure enough, while everyone else was sewing together recycled socks to make masks for frontline healthcare workers, police were just sitting on large stockpiles of quality PPE. ACAB

Moxie Marlinspike

@moxie

4 years

While nurses suffer shortages that put them at risk, folks dig old wildfire n95s out of closets to donate, and people hand sew masks out of scraps to share. But what are the chances police and military are still fully stocked with protective gear hospital workers need right now?

5

20

109

9

88

307

Moxie Marlinspike

@moxie

2 years

I made another collaborative art NFT: Unlike Autonomous Graphics, this NFT is composed of 400 pixel blocks that are each 50x50px. Once a pixel block is claimed, only the owner of the pixels can edit them. The blocks all combine to form the whole image!

Popular Pixels

Welcome to Collective Art. An NFT that is collectively owned and collectively created. Art that constantly evolves.

popularpixels.art

88

36

297

Moxie Marlinspike

@moxie

3 years

An interesting thing about conspiracy theories is that they functionally serve to direct attention away from obvious, straightforward, and plausible truths — which even if unintentional, kind of makes them… the ultimate conspiracy.

13

44

293

Moxie Marlinspike

@moxie

2 years

32

277

Moxie Marlinspike

@moxie

4 years

Duck typing, no checked exceptions, type inference, last-statement-returns, etc etc require us to press fewer keys on the keyboard, but that is not the problem I see most organizations dealing with. Or if it is, I think giving everyone a copy of Mavis Beacon would do less damage.

20

15

280

Moxie Marlinspike

@moxie

4 years

3) Your device keeps track of all "proximity IDs" it sees. 4) If someone tests positive, they choose to publish their (previously secretly) "daily tracing keys." 5) Your device frequently DLs all published daily tracing keys and KDFs to see if they match recorded proximity IDs.

8

40

262

Moxie Marlinspike

@moxie

4 years

Sometimes when I use an app that has ads in it, I'll think "This really seems like a lot of ads! Isn't it bold of them to think people will accept this kind of ad/content ratio?" Then every now and then I'll see actual TV and realize "ohhhhhhh, no it's not bold at all."

10

19

269

Moxie Marlinspike

@moxie

4 years

That seems untenable. So to be usable, published keys would likely need to be delivered in a more 'targeted' way, which probably means... location data.

11

29

259

Moxie Marlinspike

@moxie

3 years

It's not just @tecnomobile . We have the same problems with many @SamsungMobile devices, @Huawei devices, and others. Hard to replace FB when they've arranged defaults so people don't receive messages in your app w/o flipping some undiscoverable setting somewhere, but FB works.

19

49

248