#XisNotSecure
LightNews LightNews
pokinpotentialppl.bsky.social
🚨 anyone still on birdsite? 🚨

Please read this thread.

#cybersecurity
#XisNotSecure
#birdsite
mikaelthalen.bsky.social Mikael Thalen @mikaelthalen.bsky.social · Sep 5
Got access to X's beta encrypted chat feature, too.

Incredibly, as reported by @lorenzofb.bsky.social:

-X stores private keys on its server.
-No perfect forward secrecy, meaning X doesn't encrypt each chat with a new key
-X even admits “a malicious insider" could potentially gain access to chats
lorenzofb.bsky.social Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · Sep 5
NEW: X has started rolling out it's end-to-end encrypted chat for all users.

I was invited to start using it yesterday, so I asked a couple of experts if users should trust it. The answer: no, nobody should trust it at this point.

There are several reasons why, which they explained to me here.
September 6, 2025 at 7:31 PM
pokinpotentialppl.bsky.social
🚨 Birdsite Warning! 🚨

Images sent over X’s encrypted chat feature are not secure. Exif data NOT stripped.

Be careful!

#cybersecurity
#XisNotSecure
#birdsite
mikaelthalen.bsky.social Mikael Thalen @mikaelthalen.bsky.social · Sep 5
I decided to test whether EXIF data is removed from images sent over X's new encrypted chat feature like Signal and other messengers do.

I can confirm it is not. I was able to extract information including GPS coordinates from a test image sent to me.
September 6, 2025 at 7:33 PM