Top
Best
New

Posted by e_daigle 12/15/2025

“Super secure” messaging app leaks everyone's phone number(ericdaigle.ca)
623 points | 304 commentspage 4
tonymet 12/15/2025|
Can those of you writing off half of America as “ignorant “ or “anti -science “ please move those comments back to Reddit. And what conclusions did you draw when obvious left leaning apps were breached ? FB, LI , Washington Post , twitter (pre Elon) all had breaches . Does that mean left and right leaning Americans are all ignorant ?

I don’t take any offense , but I do have high standards for this forum and cringe comments make me less likely to hang out here

sigwinch 12/15/2025||
On a site called Hacker News, we need more analysis of one of the classic hacker skills, social engineering. Our first luminary hackers, and their first books, and our first movies, are about manipulating your average office worker or security guard. It doesn't work every time, but those people vote and hackers illuminated some early tools at automating the manipulation.

The turning point was smartphones. No, they don't clandestinely listen to the audio, or smuggle tower locations of unimportant people. But (all of our) behavior changes when we rely on an app and give up those other liberties because app. Some social engineering was required for mass adoption thereof, and most of us here are acquainted with the analytical means to concentrate delivering that. Half of our society has weaknesses that we euphemize as "gaming habits" or "addictive personalities". Maybe they know it; I'm not down here haughtily scoffing that they cannot know it.

China and Russia and North Korea don't show those weaknesses because those people are down in the mines. The powers learned social engineering within their closed societies, not in our open societies. They promote a nation and a people unified with one personality. The United States and similar freedom exponents have to contend with attracting the world's talent by explicitly tolerating any personality. At least for now

tonymet 12/17/2025||
@dang can we improve the integrity filter I’ve been seeing a lot of these
acdha 12/15/2025||
None of the sites you mentioned are (or were) left-leaning unless you are saying anyone less politically correct than Fox News is leftie, but that’s missing the bigger reason why the MAGA connection matters: MAGA is at its heart conspiratorial, obsessed with the idea that the “elites” are against the common man. That war on expertise has been there from the beginning and it makes followers unusually vulnerable to scams because it normalizes this way of thinking that everyone’s opinion deserves equal weight. Sure, security experts say to use Signal but why should you trust them any more than the scientists who say the earth is warming or the economists who say that gold has drawbacks as the basis for an economic system?
jjgreen 12/15/2025|||
The Sturmabteilung were lefties compared to the Schutzstaffel I guess.
tonymet 12/16/2025||
Reddit comment++
jjgreen 12/16/2025||
Too kind
tonymet 12/15/2025||||
It would waste my breath to try to convince you that MAGA Americans actually are intelligent. My point is that all apps have breaches , and a great many of them are run by liberals (who love climate change and inflation, as you do ) , so what does any of this have to do with a tech forum
acdha 12/15/2025||
> It would waste my breath to try to convince you that MAGA Americans actually are intelligent

Definitely, because I never said they weren’t and certainly don’t believe that — I know too many smart conservatives for that. That’s a big part of the problem: smart people can put a lot of effort into constructing rationalizations so when they’re immersed in a culture where political correctness trumps objectivity they’ll construct elaborate narratives to support the ideologically useful outcome.

The relevance to security is that these people are more vulnerable because they can’t tell charlatans who appear to be on their side apart from people who actually know what they’re talking about. There are tons of right-leaning people in tech but as we saw with election fraud claims, the competent ones know it’s risky to contradict the narrative and stay quiet rather than being accused of being RINOs. It’s similar to how things like MLM scams spread in religious communities if you have experience with that, where things usually have to get pretty bad before someone is willing to criticize a friendly member of their congregation.

tonymet 12/16/2025||
don't you see how this perspective is the same tribalism (all my leaders are benevolent, all of theirs are tyrants / grifters)?

For every example of Maga group think, I can think of an example of Obamaphile group think.

And if the contrarian / doubtful end of the spectrum ( all elites are nefarious) is bad, doesn't that imply that the gullible / trusting end of the spectrum (all elites & academics are benevolent) is also bad?

The roles are just a mirror of each other. You're just picking sides -- which is how things usually operate.

tonymet 12/15/2025|||
They are left leaning and run predominantly by left leaning staff and boards . FB and X have pivoted opportunistically to Trump , and still only slightly
shevy-java 12/15/2025||
[flagged]
oersted 12/15/2025||
I feel like you are overthinking it. There's a segment of the population that share a set of values, they are collectively more active than average in imposing their worldview on the rest, and they've had a strong momentum towards their goals for a while.

They are labeled MAGA, and they are as real as any widespread social movement could be. If your point is that social movements don't really exist as a "material" entity, then we are just arguing semantics.

ambicapter 12/15/2025|||
Probably because a non-insignificant portion of them are literally trolls, Africans and Indians masquerading as True Americans for the grift.
bflesch 12/15/2025|||
These might be the low-level trolls but there are also thousands of career beaurocrats in our non-democratic eastern neighbor countries who do exactly this as their full time job.
oersted 12/15/2025||||
I hate to get into this, but I'm impressed by the ideological juggling. A conspiracy theory about minorities being anti-minority to weaken the majority by provoking them to anger against minorities?

I suppose I'm falling for the trolling right now.

EDIT: I assumed, perhaps wrongly, that OP was referring to individual "Africans and Indians" from the US. I suppose it does make some sense if we are talking about organised action from foreign powers.

ceejayoz 12/15/2025|||
> I suppose it does make some sense if we are talking about organised action from foreign powers.

It doesn't even have to be organized.

Ragebait gets clicks. X pays out for engagement. (https://help.x.com/en/using-x/creator-revenue-sharing) The amounts are low by US standards, but nice pay by developing world standards. Thus, a cottage industry of fake accounts arises, without needing nation-scale organization behind it.

oersted 12/15/2025||
That's a fair point, I appreciate being taught something new.
chasebank 12/15/2025||||
Africans and Indians are not minorities. Sure, if they live in the US, but I'm pretty sure OP referring to people in other countries.
random9749832 12/15/2025||||
What part of wanting destabilisation for the most powerful country in the world is hard to understand for those that aren't from there?
TylerE 12/15/2025||||
It’s not trolling. When twitter turned on locations a few weeks ago many of the top maga accounts were revealed to be operating out of Russia or India.

https://www.bbc.com/news/articles/cj38m11218xo.amp

sigwinch 12/15/2025|||
You’ll have to decide under “About this account” whether this True American might have intelligently chosen a VPN endpoint in those regions.
raverbashing 12/15/2025|||
elon is literally paying indians to cosplay as "patriotic americans" on Xitter
theultdev 12/15/2025||
That doesn't make any sense. Why release a feature to show account locations then?
kgwxd 12/15/2025|||
Because people that don't think will believe the shown location is accurate, instead of whatever the corrupt jack-ass running the site wants it to show. Any account that praises him will be a "verified human US citizen"
raverbashing 12/15/2025||||
Yes that feature was long overdue
theultdev 12/15/2025||
Yeah should have been done by Dorsey a long time ago.

Afaik X is the only social media service that does this so far.

Such a simple feature that has a major quality of life improvement.

ceejayoz 12/15/2025|||
> Afaik X is the only social media service that does this so far.

Facebook has had it for years.

https://www.facebook.com/help/320055788882014

theultdev 12/15/2025||
Per your link, this isn't for every account. Just for pages that reach a large number of people. Good step though.

There really is no privacy concern to list the country of a user. I don't know why FB has to qualify it just for large pages only.

thesuitonym 12/15/2025|||
It's not really a useful feature because it's super easy to spoof once you know you have to.
anonym29 12/15/2025|||
I think the comment you're responding to just means monetizing high-visibility creators in general as a systemic practice, not deliberately facilitating deception.
theultdev 12/15/2025||
Possibly when it comes to the "paying" part.

But my response was directed towards "indians cosplaying as patriotic americans".

I'm on the fence when it comes to paying people for posts, but that wasn't really the heart of the statement.

frio 12/15/2025|||
It's intent of action vs. actual action.

Elon may not be _intending_ to pay foreigners to cosplay as patriotic Americans.

However, X pays people based on engagement. A number of people outside the USA have figured out that if they post outrageous shit to Americans, they get engagement -- and therefore earn money. So in fact, Elon _is_ paying foreigners to cosplay as Americans, but it might not have been what he meant to do.

anonym29 12/15/2025|||
There were a ton of "I'm a red blooded god fearing patriot"-type accounts being operated out of Russia, India, Pakistan, etc - the BBC link in another chain of this thread covers it. I think this is more about the global economy and the economics of western political engagement on digital platforms rather than some grand conspiracy, personally, but in a very literal sense, the post could be described as not technically inaccurate, even if missing the point and assigning personalized blame where it probably isn't warranted.
vel0city 12/15/2025||
> WHO exactly is MAGA really? I am no longer convinced that MAGA is "real". Or really significant.

Many are easy to spot. All the people with giant "Make America Great Again" flags in their front yard or attached to their lifted pickup trucks. The people in my neighborhood who have their Christmas light decor as a giant sign of "TRUMP WAS RIGHT ABOUT EVERYTHING". Funny how they complain about the leftists killing Christmas by removing Christ but they went from having a nativity scene to having TRUMP take up their holiday decorations.

This org? Over the top patriotic branding (FREEDOM chat, logo is an eagle, etc). They make a point to be on Truth Social. On their Truth Social profile they have interviews on Breitbart and similar right-leaning people, including Laura Trump. Their brand Truth Social page constantly complaining about SOCIALISM.

If you're not seeing the MAGA alignment of this chat platform you're just not looking very hard.

cdrnsf 12/15/2025||
[flagged]
throwawaysleep 12/15/2025|
Or simply… lying.

There is no need to be honest to a Trump voter. Honesty is work and they will believe nonsense anyway.

ActorNightly 12/15/2025||
[flagged]
snapcaster 12/15/2025|
[flagged]
billy99k 12/15/2025||
[flagged]
nerdsniper 12/15/2025||
> Now let's look at left-leaning apps and how insecure they are and how quickly they patch vulnerabilities.

Your point stood fine without this. It might make sense for a different audience but this audience understands all of that.

nutjob2 12/15/2025|||
> Your point stood fine without this.

Did it? Mentioning MAGA is smear? The app's intended audience is pretty clear.

But where I really disagree is promoting whataboutism. Anyone is free to submit stories about the foibles of the left or right, but what we don't need dualing whatabouts for every issue raised.

billy99k 12/15/2025|||
[flagged]
nerdsniper 12/15/2025||
Take a look at this comment section. None of the other comments are making this political. The rest of us understand it’s not a “MAGA thing”.
jfindper 12/15/2025||
>[...] it was patched within a month. I'm in the security industry, and this is amazingly fast.

Lying is bad.

mintplant 12/15/2025|||
Their API leaked all users' login PINs to other users, and they only took a month to patch it! So fast, so secure.
billy99k 12/15/2025||||
"2025-12-09: Freedom Chat notifies us issues have been patched"

It's on the site. and If you don't think I'm in the security industry, LOL

jfindper 12/15/2025|||
>If you don't think I'm in the security industry, LOL

Please let us know who you are affiliated with!

lovich 12/15/2025||||
pretty sure they were calling out the "amazingly fast" portion of your quote as the lie, but feel free to ignore whatever doesn't help your narrative. I'm a poster on a forum, not a cop
sophacles 12/15/2025|||
I think the one thing you conveniently didn't bother to back up is the thing that people doubt.

You know the claims that a P0 vuln being patched after a month as "fast".

grayhatter 12/16/2025|||
It might not be lying... he might me a complete idiot!

If it took me a month to patch a data leak vulnerability on a web app, I'd resign, and probably retire... That's an embarrassing timeline, and the people involved should feel bad.

agentifysh 12/15/2025||
I'm curious why a Canadian is so hell bent on causing more division in America by embedding his political views in an otherwise decent vulnerability analysis.

He makes it sound he's on some sort of a mission...like the users of the messaging app ( which I have never heard of before until today ) should face some sort of backlash for their own political views opposite of him....which is amusing to say the least as Canadians seem to have permanently marked conservatives, not just in their own country but all over the world as "MAGA".

also I'd appreciate if we can keep politics out which just detracts focus on technical end of things

verdverm 12/15/2025|
> I'd appreciate if we can keep politics out

This is an app specifically built for a specific political group, a group that is wreaking havoc on our science and technology. "MAGA" has become the go-to term for a global movement, because there is a global alt-right movement to undo progress and dominate others into their world view.

It's going to be a part of HN like it was the first go around. Being apolitical is how political groups like this come to power.

agentifysh 12/15/2025||
same argument can be made for bluesky or reddit pretty much any platform you slap political labels on and this only increases division and radicalizes people on the fringes and desperate for a sense of belonging to as surrogacy for loneliness
verdverm 12/15/2025||
Do you want the alt-right to take over? If your answer is no, then understand we need to talk about it all the time to fight back.

They want us to _not talk_ about what they are doing so we _remain ignorant of each other_ think about what they are doing, so they can get away with more

agentifysh 12/16/2025||
No but do you want the alt-left to take over? I'm for neither side and im tired of the constant ideological battles
verdverm 12/16/2025|||
We need to talk about both of them, not neither

You want constant ideological battles to end, and the answer is... do nothing?

They have the megaphone. If you want to take it away, we have to talk to each other about it so they start marginalizing their posts and opinions. MAGA is the poster child for the Overton shift, it's not going back any amount without effort

whoknowsidont 12/16/2025||||
As far as everyone on the planet is aware, the alt-left doesn't want to murder people.
groby_b 12/16/2025|||
You'll need to understand that <blatantly political actor does stupid thing> is a criticism of the actor's stupidity, not the political faction.

If it consistently happens more often for any given political faction, then it's still not an ideological statement, just a realization that not every political direction has an equal commitment to facts and reality.

So, mostly, I'd like the alt-stupids to not take over.

UberFly 12/15/2025|
The comments here are a disaster. Who could have predicted this???