HackerNews中文版

大家好！我是一名坚定的隐私活动家，坚信隐私是一项基本人权。最近的情况可以说相当令人沮丧。Meta在过去几个月中取消了端到端加密，欧盟的聊天控制辩论仍在继续，而主要科技公司在构建自己的人工智能系统时收集了大量数据。最受欢迎的通讯应用之所以方便，是因为大家都在使用它们，但大多数并不真正以隐私为首要考虑。这也是消费者社交应用竞争如此激烈的原因。例如，Telegram在隐私方面进行了大量宣传，但普通的Telegram聊天并没有端到端加密。用户仍然需要信任Telegram在其服务器上创建、存储和管理他们的私钥。然而，还有许多更注重隐私的工具，我自己在生活中也一直在使用。Signal将密钥存储在本地，并将端到端加密设为默认选项。SimpleX采取了更去中心化的方法。Meshtastic允许硬件网络。这些项目中的许多都是开源的，并解决了真正的隐私问题。但它们都面临同一个主要问题：网络问题。一个通讯工具只有在你需要联系的人也在使用时才有用。说服你的朋友、家人、同事或客户离开他们已经使用的应用程序并转移到其他地方是很困难的。这就是我开始考虑另一种方法来恢复我们日常生活中的隐私的原因。与其创建另一个通讯工具并要求每个人切换，不如将私密加密引入人们已经使用的通讯和社交平台？这就是我在我的副项目实验Ekko中所构建的。Ekko存在于你的浏览器扩展或手机键盘中。你正常写一条消息，Ekko PQC在消息到达通讯工具之前在本地进行加密，接收者在他们的设备上本地解密。通讯工具仅传输加密内容。PGP几十年前就证明了个人可以控制自己的加密密钥。但它也显示了当用户必须手动管理密钥、复制消息、加密、粘贴密文，然后重复这个过程以解密回复时，加密变得多么困难。如果普通人无法使用，强大的加密技术是远远不够的。Ekko的目标是使这个过程与现代、已经流行的通讯工具无缝对接。你不需要理解加密算法或切换到自托管的解决方案，也不需要移动应用程序。Ekko仍处于早期阶段。我们有一个良好的工作原型，我正在与朋友进行早期访问测试，同时我们在构建后端基础设施并完善无缝的通讯工具集成。它目前还不能完美运行，但我们正在积极努力！这些应用程序、浏览器扩展和加密代码都旨在开源。通讯工具可能仍会看到元数据，包括谁在沟通、何时发送消息以及人们沟通的频率。一个平台可能会阻止加密消息或破坏集成，但这可以积极应对，尤其是在我们有近十亿欧洲人即将受到监控的情况下。但这可以让用户控制他们消息的实际内容，而不必强迫他们的整个社交圈转移到另一个平台。我非常欢迎直接的批评，特别是在安全模型、密钥交换、多设备支持、元数据、平台限制，以及这种方法是否真的解决了足够的网络问题以便有用方面。我在两天前刚刚公开了这个想法，并开始在公众中构建，所以任何想法都非常感谢 :)https://useekko.app我很乐意交流！任何咨询、建议或合作，请联系 kirill@useekko.app让我们为隐私权的不可压制而奋斗！- 来自Ekko的Kirill

查看原文

Hi everyone!I am a big privacy activist and I strongly believe privacy is a fundamental human right.Lately, things have been quite frustrating to say the least. We have Meta removing end-to-end encryption over the past months, the continuing debate around EU Chat Control, and major technology companies collecting enormous amounts of data while building their own AI systems.The most popular messengers are convenient because everyone already uses them. But most of them are not truly privacy-first.It's also the reason why consumer social apps are such a competitive field.Telegram, for example, markets itself heavily around privacy, but normal Telegram chats are not end-to-end encrypted. Users are still trusting Telegram to create, store and manage their private keys on their own servers.But there are much better privacy-focused tools that I myself have also been a user of throughout my life. Signal stores keys locally and makes end-to-end encryption the default. SimpleX takes a more decentralized approach. Meshtastic allows hardware networks. Many of these projects are open source and solve real privacy problems.But they all face the same major issue: the network problem.A messenger is only useful when the people you need to talk to are using it. It is difficult to convince your friends, family, coworkers, or customers to leave the applications they already use and move somewhere else.That is why I started thinking about a different approach to restore privacy in our daily lives. Instead of creating another messenger and asking everyone to switch, what if we could bring private encryption into the messengers and social platforms people already use?That is what I am building with my side project experiment, Ekko.Ekko lives inside your browser extensions or mobile keyboard. You write a message normally, Ekko PQC encrypts it locally before it reaches the messenger, and the recipient decrypts it locally on their device. The messenger only transports the encrypted content.PGP showed decades ago that individuals could control their own encryption keys. But it also showed how difficult encryption becomes when users have to manually manage keys, copy messages, encrypt them, paste ciphertext, and then repeat the process to decrypt a response.Strong cryptography is not enough if normal people cannot use it.The goal with Ekko is to make that process seamless with modern, already popular messengers. You should not need to understand encryption algorithms or switch to self hosted solutions, move applications.Ekko is still early. We have a good working prototype that I am testing with friends in early access while we build out a backend infrastructure and ace the seamless messengers integrations. It does not work perfectly just yet, but we are actively getting there!The applications, browser extensions, and cryptographic code are intended to be open source.The messenger may still see metadata, including who is communicating, when messages are sent, and how frequently people communicate. A platform could block encrypted messages or break an integration, but it could actively be battled back, especially when we have almost a billion Europeans about to be actively surveilled.But it could give users control over the actual contents of their messages without forcing their entire social circle to move to another platform.I would appreciate direct criticism, especially around the security model, key exchange, multi-device support, metadata, platform restrictions, and whether this approach actually solves enough of the network problem to be useful.Just publitised this idea two days ago and started building in public so any thoughts are appreciated :)https://useekko.appI would love to talk! Any inquiries, suggestions or collaborations, kirill@useekko.appLets fight for the right to privacy to never be suppressed!- Kirill from Ekko

将无缝的后量子密码学（PQC）加密引入您已经使用的每一个通讯工具中。