Ask HN: Keybase Alternatives?
Since Keybase is being acquired by Zoom (see https://news.ycombinator.com/item?id=23102430), it would be lazy to not start looking at alternatives already
I myself mostly use the following features from Keybase: Chat, KBFS, Git repositories and encrypting messages sent out-of-band via PGP in Keybase (and the various cryptographic tools [signing, validation etc])
What alternatives have the features outlined above, but are ideally either FOSS or at least not run by a for-profit company? I mainly used Keybase to make using those features easier, so please don't suggest the cli of gnupgp (or similar) as alternatives.
236 comments
[ 3.6 ms ] story [ 298 ms ] threadIn all these scenarios Zoom gets better security which is a win for the world :)
I'm more worried about the scenarios in which keybase gets worse security. Zoom's attitude to security is terrible.
And there'll be definitely alternatives, which is the beauty of FOSS.
But I want to get ahead of the concern that Keybase is now owned by a Chinese company, which instantly compromises it.
PGP is dead on arrival, since it's an overcomplicated mess.
Keybase felt like WireGuard for its use case, just dead simple and also secure.
Update: I just want to clarify that I am happy for the Keybase team. This is clearly an Aquihire meant to bolster Zoom's security talent. And as a Zoom user, I'm generally happy about this development. But there will definitely be a concern about them being acquired by a Chinese company.
Update #2: I thought about FooBarWidget and others' comments, and I'm going to alter my wording. Zoom isn't a Chinese company, but their development team has been entirely based in China all this time and there have been concerns about that (which are entirely legitimate for certain groups like governments, in my opinion), especially given their communications aren't e2e encrypted.
I am very put off by this anti-China rhetoric. Everything that even has a remote connection to China is now under suspicion. This is madness.
Eg smoke: https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto...
Their development team is entirely based out of China.
Please, spare me the rubbish about anti-China rhetoric. This has nothing to do with the Chinese people or culture. I clarified that this is for local _government_ clients. It absolutely matters, whether you get offended or not. I also mentioned that my company is a Zoom customer and this move generally has me happy.
We had the same conversation about Russian owned antivirus companies months ago as well. I understand there is legitimate concern about anti-Asian rhetoric. I just wanted to clarify that it's not where I'm coming from. As someone who introduced Keybase to these clients, these questions are going to come to me. And I want to have an answer for my government clients for this legitimate concern.
Like yes, you're correct, the person you're replying to is wrong. But the reason they brought it up remains valid with the correction.
You don’t need to spread false information to make a possibly valid point. People also increasingly use this sort of “yeah, they play fast and loose with facts but they have a point so cheers” to defend garbage journalism and I’m not a fan at all.
I actually did mis-read from an older article that all their development is done in China (the language is that their R&D and tech teams are concentrated in China). Hence I said entirely. But yes let's go with largely. This is an argument about who has jurisdiction to force the altering of parts of their tech stack.
Entirely vs Largely: Does that do _anything_ to alter my concerns? Nope.
You aren't listening to what he's saying: "If you have reason to be concerned about the CCP undermining your communications infrastructure, it's a distinction without a difference. The reason they brought it up remains valid with the correction."
Anything related to China CCP has large enough security concern chance. This is due to political motive to have control of information flow on everything they can.
Any team in China can be enforced to provide one or more means to obtain more data or can't operate smoothly. (See Google)
This is not "anti-China", more like "anti anti-privacy" (what's the opposite of privacy?). Same goes for any US company that does anti-privacy things like Google.
We're not talking legalese, we're talking about privacy. It's quite easy to defame an argument by nitpicking, but the holistic view that anything developed or with tightly or loosely coupled links to China by default. Explicitly should be called out as being untrusted.
https://news.ycombinator.com/newsguidelines.html
It isn't anti-China, it's anti-PRC. The difference is obvious.
China is a culture with a very long history, like all cultures, and a diasporic population, not to mention all of the Chinese people under the rule of the Republic of China on Taiwan.
Confusing the PRC with the entirety of Chinese people, Chinese culture, and China as a whole is rather similar to refusing to distinguish between Nazis and Germans, and only serves to either make criticism of the PRC impossible, since one can always accuse the critic of racism, or make defense of the Chinese people and culture impossible, since it will be taken as burnishing the PRC.
https://news.ycombinator.com/item?id=23111557
I am, however, claiming that the CCP is massively intertwined with mainland Chinese people. See this article that explains this in more detail: https://oxfordpoliticalreview.com/amp/2020/04/24/china-serie...
So if you say "I am against CCP, not the Chinese people", then that statement only makes sense if you exclude "many many mainlanders" from the definition of "Chinese people". Which makes the statement rather weak, or even nonsensical.
You say that if we accept this intertwine, it makes criticism impossible. Not so. You can still criticize the CCP, but you need to be more nuanced with your criticism, do more due diligence instead of merely rehashing western narratives, and realize that you're criticizing the CCP and the people at the same time (which could be entirely legit).
I therefore argue that recognizing the CCP - mainland people intertwine is a good thing, as it makes criticism more honest, more accurate, and possibly more helpful/constructive. No longer can you put all the blame on "just the bad guys" -- all of us mainlanders are complicit in some sense. We all own the problem, so we can't stop at just blaming, and have to actually find a solution.
No, I am not. I am hitting on something which makes some people angry. There's a difference.
As long as the Republic of China is independent, this isn't hair-splitting.
> The same concerns could be had for software developed in the U.S.
Of course not. The US isn't an authoritarian regime.
From Zoom's S-1 [1]:
"In addition, we have a high concentration of research and development personnel in China, which could expose us to market scrutiny regarding the integrity of our solution or data security features. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode confidence in the effectiveness of our security measures, negatively affect our ability to attract new customers and hosts, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could harm our business."
[1] https://www.sec.gov/Archives/edgar/data/1585521/000119312519...
FTFY
Chinese companies legally cannot refuse a government request for data. https://en.wikipedia.org/wiki/China_Internet_Security_Law
Comparing that with US/EU private sector protections is absurd.
> It requires network operators to store select data within China and allows Chinese authorities to conduct spot-checks on a company's network operations.
More has been reported about the implications of the law:
> China’s National Intelligence Law from 2017 requires organizations and citizens to “support, assist and cooperate with the state intelligence work.”
https://www.cnbc.com/2019/03/05/huawei-would-have-to-give-da...
The "rhetoric" of public opinion isn't always backed by logic, but it usually is backed by some good reason to be upset or irritated by the thing they (us in mass) are judging.
In this case, it's pretty clear that the Chinese government is acting divisively and is doing that either to protect itself (the leaders/their control) or the people (which is then implied they can't care for themselves or know better).
Either way, the route China (the govt.) has taken with business, politics, history, culture or whatever, is viewed less than desirable by Western culture. If you don't like the judgement, you can bitch about it or forget about it.
Not my horse, not my wagon. We've got bigger, oranger problems here.
I like China but the CCP is a problem.
One managed to mishear "Uighur Muslims" (yes, there are anti-anti-China people who don't know who they are, and yes, they misheard "Uighur" as a word starting with "N") and it took me quite some annoyance to get that straightened out and everybody on the "Chinese people pretty cool, Xi really not so much" page.
This shouldn't be hard to get across, except the CCP is very interested in ensuring people don't distinguish between the government of the People's Republic of China and Chinese people as a whole. Which leads to criticism of the CCP/PRC being seen as racist, which adds lots of heat to the discussion but absolutely no light. Precisely what the CCP would want, were it to attempt to influence online discussions. But I'm sure the CCP doesn't try to influence online discussions.... right?
CCP influencing online discussions in the west? Hahahaha! As someone who's neutral (not even supportive) about the CCP, I can only hope that they become that competent within a decade. Those idiots still have no idea how sophisticated communication with western audiences needs to be. In the mean time, western media walks all over them, even with stories that are easily debunked.
You don't sound very neutral.
I am not. I have plenty of critique against them. But the sentiment in HN is already so anti China that there is no need for me to voice that critique.
I am not even saying "CCP good". I am saying "CCP not as bad as you think" and "there are alternative perspectives that are just as valid".
As for my hope that they become competent in media: it is to counter all the obvious lies. I mean... Wuhan lab virus? Really? And people willingly believe these stories all over the world?
Your insistence on not making a distinction between the CCP and the Chinese people makes it hard to engage in any discussion, as criticism of one is taken as criticism of the other. I have a strong feeling the CCP is depending on this mentality from it's people, playing up ethnonationalism and xenophobia to distract from any criticism towards them.
You said clearly you wish the CCP had better propaganda and communication, why? That would make them stronger, yet you claim to not be in favor of them. Do you care to clarify?
I gave the Wuhan lab virus theory as an example. Actually the entire COVID-19 reporting is a big example, and is what triggered me to speak up in the first place. I was in China in January, I personally witnessed the news, lockdown progression, etc. And yet when I look at western reporting, there is so much misinformation, so much unjustified blame for things that are obviously not true.
For example, I see so many comments on HN saying China covered up for months (they didn't -- downplayed jan 1 to jan 20 at most), saying that China deliberately allowed international flights from Wuhan after the lockdown in order to infect the world (they didn't), and more. I see so many extreme, obviously untrue information, that I see this as anti-China.
And Chinese media is very weak against such unsubstantiated attacks. How can I sit back, see all the lies and bullying, and not hope that Chinese media gets their act together? This has got nothing to do with whether I support the CCP in the end -- just because CCP has problems, and that there are legit criticisms against CCP, doesn't mean we should accept lies against CCP, nor does it mean that they shouldn't be able to defend themselves against lies.
Again, you're not actually saying anything here, these are just your perceptions.
> I see so many extreme, obviously untrue information, that I see this as anti-China.
Right as I said it seems that you view all criticism of the Chinese Communist Party as criticism of China and Chinese people. This makes you a (ethno)nationalist, which is ironically another western stereotype. That Chinese see all criticism of China as criticism of them personally.
> And Chinese media is very weak against such unsubstantiated attacks. How can I sit back, see all the lies and bullying, and not hope that Chinese media gets their act together?
It's hard to make any conclusion other than you see the CCP as fighting for your image as well as their own. I'm wondering if you are willing to concede this is the case, and if so how do you suggest someone like me to attempt any sort of dialogue? Seems self-defeating.
And if in your opinion I got something wrong, what is it? Thanks for your response ahead of time, I come in good faith to better understand you and your perspective.
I will admit that I have an emotional bond with China, by virtue of being born there. If you define nationalist as anyone who feels as having a personal stake at the reputation of a country, then I guess I am. I wish for the country to develop, to be prosperous, to be recognized as an equal (more on this later) and to be treated fairly.
I do not personally agree with that definition, because I see a nationalist as someone who accepts their country unquestionably, and someone who thinks their country is better than others. I conform to neither of those properties. China does have many problems, it’s lagging behind the west in many aspects. If you want me to list some (besides the obvious freedom of speech things): support for disabled people is not very good, hygiene of public toilets is poor, social safety net is not as good as e.g. Netherlands, the tendency of local governments to cover up bad news thanks to structural problems with incentives. I also don’t think China is better than others, I merely wish for it to be able to stand as an equal (in value, not in likeness) among western countries. Respect other countries, and be respected in return.
In this sense, you can also say I am a Dutch nationalist. Having lived in the Netherlands for longer than in China, I have absorbed many western ideas and ideals, some of which I think China should embrace better. I also wish for the Dutch to be well, and despite the high taxes and rigid rules here I am pretty glad at how well-managed the country is.
You suspect that CCP is deliberately instilling nationalism in order to make Chinese people unwilling to accept criticism against CCP. Here are my thoughts:
- For myself, it is not true. I lived in China until early primary school. I did learn a vague sense of being proud of being Chinese, but that isn’t very different from how e.g. Americans learn to be proud of their country. I didn’t learn much history yet, nor how the state works or how other foreign countries worked. Everything after age 8 was Dutch education. But I have always felt a disconnect between what here in the west I am told about China, vs my own experience and what family tell me. Only recently have I started to do my own research to learn where this disconnect comes from, and how Chinese history was like.
- This presupposes that the CCP can be neatly separated from the mainland people. And that if we cannot, then criticism is impossible. I agree with neither: https://news.ycombinator.com/item?id=23124883
- The more I learn about Chinese history, the more I think you’ve got it backwards. The CCP derives legitimacy from preexisting nationalism. It was already there before the PRC founding, the CCP didn’t create it. The CCP top leadership are actually moderates: they try to suppress nationalism rather than making it bigger. For example: there is a saying that if the mainland Chinese were allowed to vote, they would’ve already launched an invasion against Taiwan already; while the CCP is happy with the status quo without openly saying it.
- I don’t know how much it applies to HN, but in the wider world, I see the statement ‘I am against CCP, not Chinese people’ being used merely as lip service. For example: Trump invoking the Hong Kong Freedom bill, and many people cheering on it, but the only thing the bill does is hurting HK economy and thus the livelihood of ordinary Hong Kong citizen. I suspect many people are sincere about the abstract idea of that statement, but they haven’t given any thought about what it means in more practical, realistic terms. And at the same time, many other people are not being sincere at all, and merely use the statement as a cover for racism.
- I do think criticism against CCP is okay, but I am not seeing a lot of fair criticism. I see a lot of double standards, where CCP is ...
I'll start with one thing, because addressing them all takes too long.
You think the Hong Kong rioters are fighting for freedom? Take a look at how they attack innocent women and elderly that simply disagree with them:
https://twitter.com/Mondayfreemary/status/125844037836732416...
Western media romanticizes the whole thing by not reporting anything about the dark side of the movement, and by cutting footage to make the rioters look like heroes: https://twitter.com/DanielDumbrill/status/125835760285075456...
Here's the real story, I've written a summary just earlier today: https://twitter.com/honglilai/status/1258294860618108928
This isn't just about one or two people who are criminals. The rioting, the violence, the hate for mainlanders (hate for PEOPLE, not just CCP) has completely taken over the movement. Heck, I don't even dare going to Hong Kong anymore -- as someone with a mainland background, I fear for my life.
Furthermore, 'Liking China but opposing CCP' is, in actuality, a statement that doesn't make much sense once you understand how the CCP - Chinese people relationship actually works: https://twitter.com/Bkerrychina/status/1253635970236375040
The CCP enjoys a pretty high level of support in China. Real support. Even many people who use VPN to use Twitter say they support the CCP. This support has grown tremendously in the past decade, in no small part thanks to all the demonization bullshit that western media tries to pull on China. Many Chinese read western media, think 'wtf is this overblown nonsense?', and end up supporting CCP more, even if they were previously neutral or slightly anti.
My point: by listing all those terms, you are painting a one-dimensional, stereotypical, overblown and distorted view of China. If you really want to help Chinese people, you gotta first understand where they come from. This begins with gaining an accurate image of what China is, not the media stereotype.
What is the "different side to the story" of involuntary organ harvesting of political and religious prisoners?
> You think the Hong Kong rioters are fighting for freedom?
Yes.
> Take a look at how they attack innocent women and elderly that simply disagree with them: https://twitter.com/Mondayfreemary/status/125844037836732416....
I looked but the video wouldn't play.
If that's what happened then that's also bad.
Anyway, I don't get my news from Twitter. I also don't get my news from mainstream Western new media because they are biased (I agree with you about that.)
> Furthermore, 'Liking China but opposing CCP' is, in actuality, a statement that doesn't make much sense once you understand how the CCP - Chinese people relationship actually works: https://twitter.com/Bkerrychina/status/1253635970236375040
I'll read that article, FWIW. Cheers.
But I can tell you what I mean when I say that. Chinese culture is a part of my culture. I grew up in San Francisco. There has always been a Chinese cultural influence in my life. The first Chinese New Years Parade was held here in 1851 (predating the communist party by ~70-80 years, eh?)
Also, there are millions of Chinese that do not live in China https://en.wikipedia.org/wiki/Overseas_Chinese
So China as a people and a culture is much much older and larger than the communists. That is the China that lives in my affections. I want to add that Lao Tzu's "Tao Te Ching" is the greatest book of wisdom in the world (in my opinion.)
> The CCP enjoys a pretty high level of support in China. Real support. Even many people who use VPN to use Twitter say they support the CCP. This support has grown tremendously in the past decade, in no small part thanks to all the demonization bullshit that western media tries to pull on China. Many Chinese read western media, think 'wtf is this overblown nonsense?', and end up supporting CCP more, even if they were previously neutral or slightly anti.You cannot possibly know that with any certainty in a regime that punishes criticism!
You just can't.
People lie when you've got a big stick in your hand to beat them with if you don't like what you hear, eh?
> My point: by listing all those terms, you are painting a one-dimensional, stereotypical, overblown and distorted view of China.
"...of the CCP" you mean. I don't blame Chinese people for the crimes of the CCP.
> If you really want to help Chinese people, you gotta first understand where they come from.
A billion and a half people don't need any help from me.
> This begins with gaining an accurate image of what China is, not the media stereotype.
I don't know what to tell you. Like I said, I don't follow the media.
FWIW, I straight up studied China for awhile until I realized how vast it was and how silly and arrogant I was to think that I could possibly encompass it. Now all I want is for the CCP to stop trying to edit history, stop locking people in mass concentration camps, stop stealing their organs, and stop fucking with the South China Sea. Those seem simple enough for even me to opine on, in all my ignorance.
It's about the accuracy of the claim that there's involuntary harvesting going on: https://thegrayzone.com/2019/09/30/reports-china-organ-harve...
There was harvesting going on of prisoners that have already been executed. China admitted as much: https://www.youtube.com/watch?v=wbxvZ2lIR08 This practice has stopped since 2015.
> Anyway, I don't get my news from Twitter.
Unfortunately, there's not much I can do about the fact that most media outlets don't publish videos like these. But the video footage speak for themselves. Here's evidence of rioters setting a man on fire for disagreeing with them: https://www.youtube.com/watch?v=gblPwStlsQs
If you are interested in a more long-form discussion about what's going on in Hong Kong, check out Daniel Dumbrill, a Canadian who lived in Hong Kong and now lives in Shenzhen: https://www.youtube.com/watch?v=LQx5NKAfueg
> I'll read that article, FWIW. Cheers.
Thanks. I'm already plenty glad that you're at least willing to take a look, even if you disagree.
> But I can tell you what I mean when I say that.
All right, point taken.
For the sake of discussion, I'll limit my scope here to mainlanders, not the diaspora.
I'll also tell you my point of view. I was born in the mainland, I now live in the Netherlands. My wife is a mainlander too. You're right that China as a culture and civilization is older than the CPP. Having said that, having studied China's history, I do think the CCP is the legitimate government of the mainland.
> You cannot possibly know that with any certainty in a regime that punishes criticism!
The claim that it's a "regime that punishes criticism" is overblown. There's a core of truth, but overblown. Things haven't been that extreme since the 70s. Nowadays there are many people who do in fact criticize the government.
For some perspective, try this video. This is an interview between an American and a Canadian, who both live in China. They discuss their experience with Chinese society, and things (including things about the government) are different from what they thought it is based on western views: https://www.youtube.com/watch?v=ufxfSJgQuSI
It also kinda depends on what you mean by criticize. If you try to incite riots or government overthrow, or if you work with foreign agencies -- yeah they REALLY don't like that sort of stuff, and you'll get into a lot of trouble. But for more perspective, try this example:
In 2019 there were protests in Guangdong about the building of a crematorium. https://mothership.sg/2019/12/news-china-protests-wenlou-hua... The government did not arrest the peaceful protesters. They did arrest the violent ones, but even those were released later. Eventually, the government gave the protesters what they wanted.
> People lie when you've got a big stick in your hand to beat them with if you don't like what you hear, eh?
The people I talked to are on a VPN, operating on western websites, talking to me in private. The Chinese government is not monitoring those conversations.
Having lived in the west for so long, I...
In re: the organ harvesting, I really hope you're right. I mean I really fervently hope you're right.
(It reminds me of the Walled City of Kowloon. I saw a BBC documentary about it and was haunted for years. Then one day I looked it up and, lo and behold, they had torn it down years ago. Always value new information, eh?)
> But the video footage speak for themselves.
But they don't. I'm not going to watch that (I have firm policy not to watch footage of IRL death. I watched "Faces of Death" in high school with my friends and regretted it.) but whatever it shows I'm not a video expert so I can't tell what it actually is: it could be fake, or even deepfake.
(FWIW I am firmly against setting people on fire, under pretty much any circumstance, for pretty much any reason. I think we can all agree that things have gone too far when someone gets immolated.)
When you get right down to it, I have no idea what's really going on over there, and no way of finding out.
The best I can do is go by things like the actual formal actions of the CCP, which don't seem good. (Although, as I say that, I recall that they presided over one of, if not the, greatest economic transformation on Earth. So: good job on that. Credit where credit is due.)
> check out Daniel Dumbrill
Despite what I just said, I'll do that. Always value new information, eh?
> I'll also tell you my point of view. I was born in the mainland, I now live in the Netherlands. My wife is a mainlander too. You're right that China as a culture and civilization is older than the CPP. Having said that, having studied China's history, I do think the CCP is the legitimate government of the mainland.
Cheers! Well met.
FWIW, I'm serious when I say I like China. Y'all are like a stern and distant Grandfather: wise and kind but also a little frightening. Don't tell the other Americans I said that, though, okay? ;-)
For me, it's useful emotionally to distinguish and blame "the Commies" because that way I can say to myself that Chinese people aren't to blame for the fucked up things the CCP does. In the USA, I feel that we are kind of all to blame for things like invading Iraq on a pretext, or electing a human cartoon character to be POTUS.
> I do think the CCP is the legitimate government of the mainland.
Yeah... * sigh * me too. But I don't like it.
It's been long enough IMO, and they are stable enough (again in my almost-worthless opinion) and the UN let them in, yeah?
Honestly, we over here were all set for the great Eastern Glasnost, if you will, and it's really a downer that China seems hung up on sabre-rattling. Can't we all just settle down and make some money? There are asteroids and Mars and places to go and things to do...
> The claim that it's a "regime that punishes criticism" is overblown. There's a core of truth, but overblown. Things haven't been that extreme since the 70s. Nowadays there are many people who do in fact criticize the government.
Again, I really and sincerely hope you are right!
As an American the very idea that someone from the government would get on my case for speech is preposterous. "Donald Trump is a pathetic excuse for a President!" See? No one cares. But jokes aside, as long as the CCP is punishing criticism at all they'll never be fully legitimate (again, in my all-but-worthless opinion!)
It's a weakness. Same with trying to rewrite history.
They either have to get their act together and be big enough to admit mistakes -or- pressure the rest of the whole wide world into toeing the line on their political picture-show. That sets them on an inevitable clash with Western-style freedom of speech. It's bad policy even for a legitimate government.
The stability of C...
A few additions:
The man who got burned didn't die. He got hospitalized for a few months. He is now recovered, but with scars and trauma. Here is an interview with his wife back when he was still in coma: https://www.scmp.com/news/china/society/article/3038421/wife...
FYI, SCMP is based in HK, though they are partly owned by a mainland company. Still, I find that SCMP as a whole is pretty balanced. The site has a mix of pro and anti CCP articles. The sentiment varies between authors.
> For me, it's useful emotionally to distinguish and blame "the Commies" because that way I can say to myself that Chinese people aren't to blame for the fucked up things the CCP does.
I understand.
To me, the people are to blame too. As explained in the article, CCP has 90 million members. Just the party only has more people than many EU countries. Many members are normal people: doctors, nurses, factory workers, businessmen. The CCP isn't a small elite who rules over the mainland, they are the fabric of mainland society.
The madness of the cultural revolution wasn't a CCP only thing. Many people supported the madness, that's why it took off. We all own the madness. Nowadays we can see that it was wrong.
I think there is nothing wrong with the normal people owning mistakes. I think it is rather crucial, in order to learn and move forward.
> As an American the very idea that someone from the government would get on my case for speech is preposterous.
I see what you mean. China still isn't quite on that level. But don't know whether it ever will be.
But at the same time, I don't think it's fair to judge China by that standard. China has a very different history and condition. If you judge it by western standards, China will forever disappoint you, for nothing else but "it's not like the west".
Here's what I think is a better perspective to judge China by:
The country literally had 150 years of war, revolution and poverty. Starting 40 years ago or so, that is finally over. China was quite low on the Maslow pyramid of needs, so it's no wonder they prioritize food, safety, money, prosperity.
And they succeeded in that. Everyone can eat, which was not at all a given. 200 million people lifted out of poverty -- the biggest contribution in the world. Universal Healthcare. Millions of Chinese travel to foreign countries every year, and pretty much all of them voluntarily go back. For the most part, Chinese people nowadays live a normal live.
Economic freedom, the right to survival, the right to health, are human rights too. The CCP prioritizes those over freedom of speech. As a developing country, it is impossible to prioritize everything, so you have to make choices.
It's also not just a case of "China is still behind the west, but they are working on it, give them a break". On some dimensions, they are ahead, or at least different. For example:
Chinese cities are very safe. You can go out at night, into dark alleys, without getting mugged. The police don't carry guns, there's no need to.
China managed to restore huge parts of deserts into green land.
China as a state also faces threats. The censorship, which I don't like, is meant to protect against that. It's not so much criticism that they don't like (in fact there are official channels for submitting complaints), it's threats against the state. As an American that may sound weird, but recall that mainlanders are tired of 150 years of revolution. Now they want stability, unity, prosperity. And requires a stable state.
The threats are not theoretical, as I've found out recently. A big threat comes from... The US. The US regularly ...
Yeah if you wonder why the Chinese are putting Uyghurs in camps it's because the US and Saudi Arabia sent Uyghurs to fight their proxy war in Syria. You can imagine what the Chinese government thinks of that.
What's problematic to me is that a government censors information that could change people's minds. How can we call "legitimate" a government that is not allowing those who are supposed to be the source of its legitimacy, to access opinions and ideas that could influence their choice of which party they would legitimise?
Of course it would be hypocritical to say that our western governments don't try to do the same. But at least they are forced to limit the scope of their control to information that can somewhat fit under the umbrella of "National Security" -and at least their propaganda is forced to compete with everything else out there. Censoring by force books, websites and public media that express vastly opposing ideas is out of the question -as it should be -don't you agree?
As for disallowing criticism: nowadays it's not as bad as you think. Check my other threads.
I don’t have to try a dozen VPNs to read western news outlets anymore?
Does China have problems? Yes, many. But my point is rather that it's not the hellhole many people think it is.
And if this progress happened to coincide with loosening up the restrictions of personal freedoms and the censorship that you mention, perhaps the case is that a government that allowed more freedoms might had facilitated even more progress.
The states in the middle east, which had democracy forced upon them, aren't doing that well either.
It takes a while to get there, and not all stages of development of a country is a good match for democracy.
And you say that it is not that hard to do things less badly than before. I disagree. The CCP is literally the first functional and competent government they've had in 150 years. I think you are massively underestimating how difficult it is to develop China.
I am not saying economic concerns should forever be their number one priority. At some point that has to change. But is democracy really the best path for China right now? Do they deserve no credit for what they have already achieved?
Perhaps the (late) CCP deserves credit for improving economy, infrastructure, efficiency and quality of life, to the extent that it did. And for being less cruel than its predecessors.
It is just that from the perspective of westerners, it is hard to judge positively a government that still has no respect for individual freedoms and private aspects of people's lives -i.e. looking the social score system, it is a step to the wrong direction.
My worry is that if the Chinese people become complacent and just feel grateful that they have more prosperity than before, the day where they are able to enjoy the freedoms that every person deserves will be far. And that, if they are not used to having free access to information and being in control, it will be more likely for someone less peaceful than the current CCP leadership in the future to start a war or something.
Taiwan and the Republic of China debunks this.
Maybe you're talking about how Taiwan does not like the CCP. Correct. So let me be clear: when I said "Chinese people" I'm referring to mainlanders.
You claim that all mainlanders like the CCP, which is a spurious claim given not only how impossible it is to generalize over such a huge group (including people the CCP is actively persecuting, such as Uyghurs!) but also because the CCP actively punishes people who speak against it.
Even aside from that, your conflation of "Chinese" and "mainlanders" and further conflation of "Chinese" and "mainlanders who like the CCP" is precisely what I'm talking about. It's improper, it's politically biased, and it destroys the conversation we're supposedly trying to have here.
> but also because the CCP actively punishes people who speak against it.
See my other thread regarding this topic.
Personally, I don't want companies even having development groups in China simply because I don't want China deriving any benefit from the outside world given their behavior over many things (Great Firewall, Hong Kong, Uyghurs, general human rights, covering up Covid-19 to start, etc.).
We are well past the point that "giving to China" will normalize them. Evidence shows that attitude has failed. It's time to treat them like the persona non grata that they deserve to be.
That's beside the security implications.
So how do you call a company whose operations are more than 90% in China, employing Chinese engineers, under the supervision of the CCP? You may be technically right, on paper it's a "US company", but come on...
WireGuard, however, is "decentralized" because you can run it yourself whereas Keybase was always a centralized service where you always had to trust someone else instead of yourself or a public blockchain!
That being said, congratulations to the keybase team! :-)
https://www.aclu.org/other/surveillance-under-usapatriot-act https://www.eff.org/deeplinks/2020/03/earn-it-act-violates-c...
https://news.ycombinator.com/newsguidelines.html
I am no cheerleader for NSA surveillance. People who know me in real life are probably tired of hearing me talk about it (and privacy/security in general).
I specifically left my original comments in there because I don't want to pretend that I said anything perfectly right from the beginning, without the help of others.
Er what? The complaint about PGP is that it is too simple. Users have to know too much about how public key cryptography works. The suggested alternatives are much more complex.
They showed us they don't think security seriously at all through their actions. For example, they opened up lots of holes(local HTTP server to bypass app open dialogue, local privilege escalation via their webcam/mic hack) on the user's system to provide "better" UX. They just cannot be trusted.
https://github.com/keybase
The only other alternative is a mishmash of multiple apps that each do part of what Keybase does.
Now that the deal is done and appears to have been primarily an acquihire focused on adding E2E to Zoom, Keybase may be low enough priority for Zoom that open sourcing it is a viable option now.
Eg, it doesn’t sound like Zoom wants to allocate any dev time to Keybase, wants to stay focused on Zoom, and probably can’t sell Keybase without its developer team who are all working on Zoom now. So hopefully they’ll just open source it and let the community take over.
Because I see that the Keybase client is open source but not the server…
[1] https://handshake.org
Isn't that chat pretty new in Keybase's history?
It looks like keybase has morphed since I've last looked at it. I recall its primary function being that of a Web of Trust-like system for different public keys and addresses.
> Does Handshake have chat, chat room, and team chat functionality too?
That said, with additional tools, Handshake also improves end to end encryption services since you can actually place fingerprints/certificates on the blockchain so you can actually verify these instead of just 'hitting yes' like most people appear to do when using e2e chat applications.
As a bonus, it also improves web security since there are hundreds of actors who can generate 'valid' certificates today. This becomes impossible with Handshake.
I guess it depends on the user, but the key feature of Keybase (for me) is the web of trust I've built over the years now, and secondary is the features built on top of that web of trust.
While all these features are individually nice, I kinda started to worry about Keybase as a product when they started bolting on stuff like this.
I think the key (pun intended) to stable & ongoing success in this space is to focus on doing one thing well. Keybase was incepted as a service for signing & validation. There's currently https://keys.pub for that. I'd be interested to hear if there's others.
For chat, there's a lot of competitors to choose from. I like Riot.im.
For KBFS, Tresorit has been mentioned. I signed up, but haven't been super impressed with their clients yet. I'm not sure what better options are out there.
The Stellar airdrop was my "oh shit" moment.
Honestly I would have done the same stuff, I don't see why people are mad, it doesn't make the product less good.
For corps especially, they want to be able to pay money so they can get support and SLAs. But keybase files have always had somewhat bad performance and undefined storage limits, so you couldn't rely on it as a company. It was always the biggest confusion point about keybase for me. If keybase charged money, would they have been more successful?
The social network / device & key management stuff they started with I considered their original startup idea that they pivoted from.
I wonder what if any features besides for the core crypto code Zoom will try to adapt. They are after all a rapidly growing enterprise app and I could see chat or file sharing being added.
they got to do some pretty cool stuff and just exited pretty nicely joining a company that is on the rise. I'd say that's a success. Being in the field that's pretty much what I wish I could do whenever I'll start a startup.
AFIACT this crucial aspect is missing from keys.pub.
I always thought it was meant the other way around: if you know someone from HN, you just have to look them up on Keybase and you can talk to them.
https://news.ycombinator.com/item?id=22995792
Client is so-so (more stable than KBFS to be honest) but the service is very costly and I would rather a BYOB (bring your own backend) approach using some other product...
I was not necessarily worried, but it's true that it's nice to have a tool that does a few simple things. keys.pub looks like it's doing this.
If you are interested in joining the (coming soon) beta, feel free to contact me: https://bloom.sh/contact
[0] https://gitlab.com/bloom42/bloom
[1] https://gitlab.com/bloom42/bloom/-/wikis/security
So it offers the same services as Google, but with better (in my opinion) features.
Currently it's not planned because it's a lack of focus and I believe that the existing alternatives (Signal & Matrix) are really good.
Adding encrypted email is envisaged but it will be considered once the other features have reached stability (Email is such a mess...)
* secure revenues with the hosted offering to assure the sustainability of the project
* Grow a community
* Work on decentralization
So it's "centralized" (it's not really a social app, so it's not really a problem) right now, but the goal is (the identity part) to be federated/p2p in 1 year
Or Signal?
[1] https://book.peergos.org
[2] https://github.com/peergos/peergos
[disclaimer: Peergos founder]
KBFS: personally I switched to gpg encrypting important files on a NAS with encrypted backups to amazon glacier and backblaze.
Git: gitlab, github, bitbucket (just to name a few)
Encrypted messages out-of-band: Just use plain pgp/gpg
None of those hide the contents of your repo from the company that's hosting it. I suppose self-hosted Gitlab hides it the same way that Keybase does (the company's software sees your repo, but it's not stored in plaintext on their disks)
https://github.com/spwhitton/git-remote-gcrypt is probably the best alternative for now, but I'm wailing and gnashing my teeth at the prospect of going back to PGP keys. Maybe there's some way to intersect https://github.com/FiloSottile/age and a git remote.
Website:
https://wire.com/en/
Their backend is open source unlike KeyBase:
https://github.com/wireapp/wire-server
https://signal.org/en/
The server is open-source so you could host your own server -though that's not very practical due to the client situation (not really a variety of configurable ones, so you'd probably need to change/package/distribute the official).
As soon as something is well-known, it will be abused by spammers/scammers.
Could you elaborate on why you put your public key in well-known and also how (and for what purposes) you use your air-gapped private key? As an average user, I’ve always been worried about private keys being stolen or lost.
Not all my private keys are air-gapped, but the encryption key is, since I don't need to decrypt my backups, and don't expect to receive encrypted email very often, so why take the risk? I have an old laptop which is not connected to any network and that I only use for this now: I plug the USB key with the private key, decrypt / sign whatever I need to and that's all. It takes me a lot of time, but I don't do that more than a few times every year.
That was weird, but not bad. But it doesn't have anything to do with this thread. (It's a funky dance video.) You seem to be spamming that link on HN. Please don't. You'll just get banned.