News for hackers. Stuff that matters.
Re:Introducing the Keybase filesystem by chc4 on Thursday February 04, 2016 @06:42PM (#11038179)
I'm not sure about that either. The weakest link seems to be a national security letter to Keybase where they distribute a backdoored version of the FS driver to Alice, and adds the key of Eve to all messages also encrypted to Bob.

However, Keybase can't just broadcast "Eve on twitter is Bob!" - the client gets that announcement and links you to the tweet that claims it, where you audit the twitter handle, key fingerprint, etc.

Re:Introducing the Keybase filesystem by kedean on Friday February 05, 2016 @04:22PM (#11044731)
If the NSA is your adversary model, Keybase isn't for you. If the NSA is your adversary model, NO system involving any central servers is for you, unless they only act as a dumb relay. Since Keybase is also the provider of your proof that another party is who they claim to be, they will always be suspectable to a government adversary. If you want to be NSA-safe, you can't trust any third party companies code, and that just leaves you DOA.

tldr; this isn't for the NSA adversary model

Re:Introducing the Keybase filesystem by eridius on Friday February 05, 2016 @12:39AM (#11039735)
Anybody who's worried about being the target of a National Security Letter can just compile from source instead of using a binary distribution.
Re:Introducing the Keybase filesystem by rmc on Friday February 05, 2016 @04:42AM (#11040475)
This is why the CJEU doesn't view the USA as a safe habour anymore.

US laws have broken the internet.