riseup.net likely compromised

While its true the FBI was interested in user emails not the admins running things, there is no need for the passive aggressive tone.

Whether they do the right thing or not (depending on who’s opinion?) is besides the point. Only technical means to enforce privacy is what matters. The rest is meaningless. Promises can be broken, people can be threatened or bought off, central servers are huge targets for hacking. Centralized services are just bad.

Also you are deceived if you think the new server side encryption is anything besides PR. If the user doesn’t hold they key then the contents can be silently recovered and handed to a third party. Simple.

Before this incident they were disorganized and failed to update their canary on time. People had to nudge them to get them to do it. So when this happened no one knew if they were being negligent or if something was going on.

Also when people were alarmed at their bird related tweets they misleadingly denied in a direct way that they’ve been contacted by LE. A bare-faced lie.

They’ve clarified that they protect privacy based on their personal discretion not as an absolute principle. They lied about the canary see what I’ve written above.

The “technical” protections are toothless drivel. See above.

1 Like