A Rust-implemented end-to-end encrypted messenger core that combines X3DH, a post-quantum PQXDH variant, Double Ratchet, Sealed Sender and Noise Protocol to provide session establishment, continuous encryption and protected transport. It includes a relay server that delivers messages without reading or linking them, encrypted on-disk storage for identities and conversations, a terminal client, FFI bindings for Kotlin/Swift/Python and a proof-of-concept Android app. The codebase is heavily tested (unit and integration tests across core, transport, server and storage), can run a full encrypted-demo locally via provided cargo commands, and claims high efficiency (title notes 10k connections on 124MB RAM). Identity is key-based (no phone or email), design emphasizes resistance to surveillance and backdoors, and full technical specs and threat model are documented.
Foundations are functional but not production-ready: user interface is minimal, server deployment is local-only, transport currently uses ws:// (no TLS/wss), secure OS-backed key storage and federation are unimplemented, and no independent security audit exists. Build prerequisites and test commands are included, along with scripts to generate mobile/Python bindings. Licensing is dual: AGPL-3.0-or-later for open source use and an available commercial license for alternative terms. Roadmap, changelog and contribution guidelines are provided for developers who want to extend or harden the system.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
UK Prime Minister Andy Burnham admitted that Russia was involved in influencing Britain's 2016 Brexit referendum. This marks the first official acknowledgment by a British leader of Russia's role in the divisive vote to leave the EU. (kyivindependent.com)
Deloitte helped falsify documents to hide Roman Abramovich's assets and evade taxes, with accounts in Cyprus omitting assets worth $672 million. Experts describe the scheme as blatant tax evasion, which Abramovich denies knowing about or authorizing. (bbc.com)
Ledger confirmed the presence of an unauthorized hardware implant inside a customer's crypto wallet during an investigation into thefts linked to CryptoBilis. The company has suspended sales of all hardware wallets and is working with authorities to determine if the implant caused the estimated $92.9 million in losses. (crypto.news)
Fable's AI technology played a role in replacing experienced engineers, fueling fears of job loss in the tech industry. Personal experiences highlight the emotional and professional impact of layoffs influenced by AI advancements. (cendyne.dev)
A commit in the Zod 4.6.6 repository suggests it might be infected, prompting users to avoid installing this version. Developers are advised to exercise caution with this release to prevent potential security risks. (github.com)
TorrentClaw is an AI-powered torrent search engine that verifies torrent contents with its TrueSpec feature to identify fakes and malware. TrueSpec analyzes files and scans suspicious content with VirusTotal to enhance safety for users. (torrentfreak.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.