4,891 karma · joined December 11, 2023
- Cloud backups — by default, backups to iCloud/Google Drive contain plaintext messages, and E2EE backup is opt-in. Even if you enable it, a weak password collapses the effective security, and any other person in the chat with an unencrypted backup exposes the conversation.
- Metadata — who you talk to, when, how often, IP, contact graph, etc. This is the "reading your life without reading your messages" argument, and it's the part that's genuinely well-established.
- Pen register / FBI — the claim that WhatsApp uniquely delivers near-real-time metadata (~every 15 min) to law enforcement.
- Group chat membership integrity — a server-level adversary can inject a member into a group; messages stay encrypted but get delivered to the injected party. Endpoint compromise (Pegasus / CVE-2019-3568) — encryption is irrelevant if the device is owned.
- Closed source, Meta AI, business accounts — content can leave the E2EE envelope in those flows.
Nothing really new here, and as everyone else is pointing out Telegram might be worse.
The spa approach is a little weird. FDA workaround?
I still really like some PG essays, but PG used to be a much better writer.
Indeed this wouldn't even be front page material if PG's initials were not on it.
But luck is also not "earning" in most senses of the word.
I think the way network effects and valuation creates billionaires is a more earnest defense. But that would start to lean into sociology and luck more than the hard-work he must insist upon, so I guess we sweep that under the "exponential because hard work" rug too.
What matters is scale. Did it deploy a novel zero-day exploit to overcome a problem? That's alarming. Did it kill a disruptive process? Pretty normal troubleshooting step.
"It's too dangerous it's a Mythos!!" directly contradicts the "I'm the cool AI you can totally trust" vibe it is trained to project.
This kind of storytelling annoys me. Give us more facts, less narrative drama.
They are very good at writing code and debugging visible errors- but that's like 50% the harness.
Would love to know more about that role
Most of that is bullshit. Having kids has made literally every aspect of my life more fun.
I don't have a similar intuition calibrated for what could go wrong when asking AI to draft a legal document. Some things seem harmless, i.e. drafting a will, but I don't really know- our legal system is notoriously rife with footguns.