Governments need to catch criminals, but they shouldn’t do it at everyone else’s expense.

1. https://mediaden.ca

I'm also so tired of people groaning about AI writing, yes, it's annoying, but attack the message, not the messenger.

It might be the thing you use to power this system, but the benefits of Heroku were precisely that it didn't need you to think about the guts of a system like Kubernetes.

The magic was in the incredibly concise API, and the fact that it "just worked".

I launched in April, and I've been steadily updating it as time allows. Really happy with how far it's come. Here are the notable privacy-by-design features I've led with:

  - Bring-your-own-storage
  - End-to-end encrypted media (config stored encrypted in the secure enclave, cached data gets stored encrypted -- one exception is videos, which require on-disk passing to the native video player -- data gets stored on your cloud provider's system encrypted)
  - Multi-cloud replication (and promotion from a replica to a new primary)
  - Proximity-based no-internet local file sharing using ephemeral keys, with man-in-the-middle protection
  - All the other typical non-shady features of a good vault (metadata removal, PIN auto-lock, privacy blur on app-switching)
  - Zero telemetry, tracking, etc. There in fact no servers at all in the loop.

Nice work.

How exactly is it peer-to-peer if it's essentially an offline, transfer via hardware?

First, addressing my first point about how this is "the modern equivalent of an ad hominem attack". The commenter is complaining as if Claude basically came up with this entire thing itself. Very very seldom is that actually how things get created, at least in my experience. Yes there's the potential for someone to say something stupid like "Claude, generate me a blog post about something", and Claude can do it. But that's such a weird way to relate to any content that was in-part authored by AI. That just isn't how virtually everyone I know is using the tools, so it's a disingenuous take.

Second, I find your dismissal of the aptness of using the phrase "ad hominem" attack reductive here because yes, AI is not a human, but two points here:

1) I'm going to give the true OP the benefit of the doubt, that they used AI as a tool for helping develop and hone their thoughts, and AI wasn't just set off in a black box

2) AI can produce novel ideas, and can produce the output of thought, even if it isn't producing it the same ways our brains think

Someone elsewhere in the thread mentioned downgrade attacks. I presume if you wanted, on either the client or the server, you could disallow pure ML-KEM if you didn't trust it, preventing this vector.

I don't know much about the hardware space - what do you make of the author's post that there hasn't been an articulated need for pure PQ encryption, where the device couldn't afford ECC.

I'm out of fresh tin-foil hats as well, but it would not surprise me in the least if any government was actively engaged in weakening security and privacy protections.

Literally look at what they are all doing in almost every sphere. The current political zeitgeist is all about automated surveillance everywhere. The motivations are worn on their sleeves.

I'm authenticated to Claude, so they already have the whole attribution thing solved.