ทวีตที่ปักหมุด
zkChat
56 posts

zkChat
@zkChatOrg
Military-Grade Privacy For Everyday. End-to-end encrypted (AES-256-GCM) conversations, one-time messages and file drops.
เข้าร่วม Kasım 2025
3 กำลังติดตาม74 ผู้ติดตาม

Learn more about zkChat in this thread.
Mobile App for P2P Chat is on its way.
Everything is Open Source.
Fight Chat Control.
zkChat@zkChatOrg
Military-Grade Privacy For Everyday. End-to-end encrypted (AES-256-GCM) conversations, one-time messages and file drops for your pocket.
English

What actual innovation looks like: zkChat.org — military grade private messaging that doesn’t read your messages, private file sharing and more.
English

#chatcontrol will only lead to criminals using other communication channels and innocent citizens being monitored.
English

We're now OpenSource at github.com/zkChatOrg.
iOS App with P2P Chats coming soon!
English

@cambytes github.com/zkChatOrg here you go! With a bit of delay as iOS app is about to be pushed soon - with same privacy level P2P chats.
English

@zkChatOrg Looking forward to it, do you have an estimated time frame for the open-source release?
English

@iAnonymous3000 Signal is controlled by the woke mob and went offline when Amazon Web Services went offline.
Do not trust Signal.
English

I like and respect Elon, and I'm grateful to be on this platform. But when he claims 𝕏 Chat is "much more secure than email," I feel obligated to explain the technical reality to my audience.
That statement is true in the same way a screen door is more secure than no door. But that's not the comparison anyone should be making.
1. 𝕏 Can Read Your Messages
𝕏 recently added safety numbers, which is a step forward. But here's the catch: your private key backups are stored on 𝕏's servers. Safety numbers help detect external hackers, but they cannot protect you if 𝕏 itself or a rogue insider, or a government with a warrant.
@signalapp's safety numbers work because your keys never leave your device. There is nothing for Signal to turn over, even if compelled.
2. No Forward Secrecy
From 𝕏's own documentation: "If the private key of a registered device is compromised... an attacker would be able to decrypt all Encrypted Direct Messages."
One key compromise exposes your entire message history. Signal's Double Ratchet generates new keys for every message. Compromise one key, you get one message. Past messages stay encrypted. This has been the standard in secure messaging for over a decade.
3. The "Juicebox" Vulnerability
𝕏 stores your private keys on their servers using a system called Juicebox. Cryptographer @matthew_d_green's analysis suggests this implementation is software-only, lacking Hardware Security Modules (HSMs).
A 4-6 digit PIN does NOT help protect this. That is trivial to brute-force if 𝕏 (or an attacker with server access) disables the rate limiting.
4. Full Metadata Exposure
𝕏 explicitly states metadata isn't encrypted: who you message, when, and how often. As former NSA director Michael Hayden famously said: "We kill people based on metadata." Signal uses sealed sender technology to hide even this information.
5. NOT Open Source
𝕏 promised to open source XChat and publish a whitepaper in June 2025. Neither has happened. Signal has been open source and audited for over a decade.
The Bottom Line:
I'm not saying don't use 𝕏. I'm saying don't use 𝕏 Encrypted DMs for anything you wouldn't post publicly.
For actual private communication, use @signalapp. It's free, works on all platforms, and the cryptography has withstood a decade of scrutiny from academics and nation-states alike.
Elon Musk@elonmusk
Send files via 𝕏 Chat with full encryption. Much more secure than email!
English

Replace these popular apps with secure and open-source alternatives to protect your data:
WhatsApp → Signal
Google Drive → Nextcloud/Seafile
X → Mastodon
VPN → Mullvad
Zoom → Jitsi Meet
Gmail → Proton Mail
Google Analytics → Matomo/Plausible
Dropbox → Syncthing
Google Keep → Notesnook
Notion → AppFlowy/Logseq
Auth0/Firebase Auth → Logto
Trello/Asana → Taiga
Remote Desktop → RustDesk
Browser → Brave
Stop letting your data leak to the giants.
English

I get where you’re coming from, but I think the disconnect is that people aren’t reacting to a few isolated policy mistakes. They’re reacting to a long-term trajectory.
For many of us the EU’s pattern is consistent: more surveillance, more control, more bureaucracy, and almost no understanding of what technological freedom requires. GDPR didn’t improve privacy in any meaningful way, it just buried the web in consent spam. And now Chat Control goes even further: mass client-side scanning, effectively mandating backdoors into private communication. That’s not “imperfect policy,” that’s a direct assault on the idea that citizens are allowed any digital space the state cannot inspect.
You don’t need imagery of “Rome falling” to see the problem. You just need to read the actual proposals.
The pushback isn’t coordinated, and it’s not hate. It’s builders realizing that if they don’t speak up, an entire continent sleepwalks into a surveillance architecture that doesn’t get rolled back.
The constructive response isn’t doomposting and it’s not silence. It’s building systems where privacy and speech don’t depend on political moods in the first place. That’s why projects like zkChat exist: private communication that can’t be scanned, scraped, or intercepted - not by platforms, not by governments, not by “safety layers,” not by anyone.
If we don’t want backlash cycles, we need infrastructure where rights aren’t privileges granted by institutions, but guarantees enforced by code. The EU may not like that trajectory, but it’s the only realistic safeguard we have left.
English

The attacks on Europe I've seen here the last couple of days, including from people I've generally considered interesting and sophisticated, have been getting unhinged...
I get that EU has problems - GDPR clickthroughs are dumb, Chat Control is awful, they need to be less bureaucratic and supportive toward entrepreneurs, its kindness toward Ukraine often doesn't extend well to Gaza or Sudan or other places, people saying mean things about criminals getting longer sentences than the criminals is just crazy - but the apocalyptic attitude about the issues, evoking imagery of barbarians pillaging Rome etc, seems really over the top.
It feels more like a coordinated attempt to delegitimize than constructive criticism.
(I don't believe the line that "the target is not Europe, it's the EU": I've seen many instances of London specifically being targeted in the hate session, so no, much of it is an attack on Europe)
It just does not match my experience from spending an average of two months every year there for the last decade.
English

Prepare yourself for 2026 & increasing surveillance of your financial data:
DAC8 in the EU🇪🇺, SEC surveillance in the U.S. 🇺🇸, mandatory KYC on every centralized on-ramp, and blockchain analysis companies tracing every transaction..
Your 8-step plan to stay alive in the new era:
1️⃣ Delete CEX (Coinbase/Kraken/Binance/..) accounts
2️⃣ Move everything to self-custody
3️⃣ Hold at least a small percentage of your portfolio in XMR, the only asset they can't trace
4️⃣ Focus on buying/selling P2P / via DEXs
5️⃣ When using XMR, run your own node or use trusted remote ones
6️⃣ Use TOR or I2P for making transactions, if possible
7️⃣ Decoy wallets + churning for plausible deniability
8️⃣ Relocate your life or at least your assets to a privacy-friendly jurisdiction
2026 is the year in which true privacy will start to shine.
Either you adapt or you become a perfect little tax slave with a public ledger tattooed on your forehead.
Save this post.
You’re going to need it.
English





