CallMeAl (like Alan)

Free Software Enthusiast

  • 3 Posts
  • 48 Comments
Joined 6 months ago
cake
Cake day: December 13th, 2025

help-circle




  • That’s very unlikely. These romance/pig butchering scammers operate from outside the USA and have no interest in attracting the kind of attention such an attack would bring.

    Planning the trip is almost certainly to build trust and make the relationship seem real. All with the goal that the target willingly gives the scammer the money. If he goes to Los Angeles after she cancels, there will be no driver to pick him up.














  • Is a professional audit the only thing that counts, or does open-sourcing the code so people can poke at it move the needle at all on its own?

    To me, open sourcing the code is a move in the right direction but it doesn’t make up for a professional review of your encryption system.

    The thing about encryption is that there are many subtle ways to get something wrong, even when just implementing it with a well known and trusted library. I took a deep dive course on Designing Secure Encryption for Practical Use and while I learned a ton from it, the main take away for me was that I shouldn’t do it if its intended for serious use. At least not without expert reviewers.

    Regarding XMPP, it’s architecture is like email. Anyone can stand up their own server and your User ID looks like an email address: user@chatserver.org. Like email, you can send messages to anyone on any server if you know their ID. Phone numbers are simply never involved.