<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>On 3/28/25 12:55, Kent Borg wrote:</p>
<blockquote type="cite"
cite="mid:e14f9716-010a-4035-b65c-b4e0e044c97d@borg.org">On
3/28/25 11:59 AM, Ray Dillinger wrote:
<br>
<blockquote type="cite">The thing that pisses me off most about
cell phones is, no matter how secure you personally may have
your own set up, when you set up a supposedly secure chat, if
ANYBODY on the list has accidentally […]
<br>
</blockquote>
<br>
Beyond securing the endpoint devices, securing the endpoint people
is a fundamental problem of any group. Cue Dr Franklin "Three can
keep a secret, if two are dead.". (From memory, I hope I have the
pretty correct.)
<br>
<br>
Key design goals of classified communications systems are (1)
secure the communications, (2) secure all the endpoints, and (3)
secure the individuals who have access to those endpoints.
<br>
<br>
Signal does #1 (apparently) very well. It does what it can with
#2, which is not very much. And for any open system #3 is
something between a UI problem and doomed, and that is where this
blew to pieces: If you can't control *membership* in the group the
integrity those members is beside the point.
<br>
<br>
-kb
<br>
<br>
P.S. How good is Signal at #1?
<br>
<br>
P.P.S. UI design died of its own success: Make something simple to
use and people mistakenly conclude that it IS simple, merely
graphic arts painted on top, and can't we make it look really
Cool? No. Good UI design requires careful thinking into the
structure of the thing, it goes far beyond skin-deep. (Pun
intended.) But in a
best-practices/design-patterns/feature-velocity/break-things/web-world…no
one cares.
<br>
</blockquote>
<p><br>
</p>
<p>Does anyone here know anything about this company called Kibu,
Inc. ?</p>
<p>This is the Los Angeles/Washington DC "Kibu" company whose CEO is
Ari Andersen, not the CT-based "Kibu" which is aimed at
disabilities.<br>
</p>
<p>Kibu has an app -- at least for iPhones (I couldn't find it in
the Android Play Store) -- that claims to eliminate the
embarrassing problem with Signal group chats -- what Kent is
referring to above as problems #2 and #3.<br>
</p>
<p><a class="moz-txt-link-freetext" href="https://kibu.io/">https://kibu.io/</a></p>
<p>Bring in-person trust to your virtual interactions <br>
<br>
Our encrypted collaboration platform secures confidential
workflows, assets, and communications.</p>
<p>--<br>
</p>
<p>Kibu is an encrypted collaboration platform that brings in-person
trust and security to your virtual interactions. Organizations use
Kibu to protect confidential workflows, assets, and
communications. Kibu users create encrypted spaces called Kibu
Pods to collaborate privately and securely with verified members.
<br>
</p>
<p><br>
</p>
<p>Kibu pods are end-to-end encrypted spaces for private, secure
collaboration between verified members. Members can protect
confidential workflows, assets, and communication, ***knowing
exactly who is on the other end***. <br>
</p>
<p><br>
</p>
<p>BTW, I listened to a podcast by the founder Ari Andersen, and
although he's a millenial, he doesn't sound crazy; however, Ari
himself is not the crypto techie in his company.</p>
<p>I'm still trying to suss out the resume of the CTO & other
technies in this company.</p>
<p><br>
</p>
<p><br>
</p>
<p></p>
</body>
</html>