maqp/tfc
View on GitHub ↗ ★ 1,323 Python
Tinfoil Chat - Onion-routed, endpoint secure messaging system
44 mentions on Hacker News by 17 people: 8 stories, 36 comments · first 2015-02-08 · latest 2026-06-04
20082026
-
…I think you're on the right track, you might check out how Qubes handles clipboard access. [0] https://github.com/maqp/tfc
comment by jazzyjackson · 2026-06-04 · in The ways we contain Claude across products -
…made it to at least three watch lists just by reading this. Anyway, here's one I made earlier https://github.com/maqp/tfc
comment by maqp · 2026-01-31 · in US has investigated claims WhatsApp chats aren't private -
…with long must-read documentation, and that requires experience with electronics and soldering. * github.com/maqp/tfc
comment by maqp · 2025-12-15 · in “Super secure” messaging app leaks everyone's phone number -
Tinfoil Chat does that (and more). https://github.com/maqp/tfc
comment by sudahtigabulan · 2025-10-03 · in Germany must stand firmly against client-side scanning in Chat Control [pdf] -
Tin Foil Chat is in this variety - mailboxes are tor hidden services identified by their public key. https://github.com/maqp/tfc
comment by jazzyjackson · 2025-03-15 · in Briar: Peer to Peer Encrypted Messaging -
…of the data diode enforce direction of data transmission with the fundamental laws of physics." [0] https://github.com/maqp/tfc
comment by edgineer · 2025-02-20 · in Multiple Russia-aligned threat actors actively targeting Signal Messenger -
…in end-user products you don't really see it. I did implement it for my messaging system however https://github.com/maqp/tfc/wiki/Commands#14-traffic-masking
comment by maqp · 2024-08-27 · in Is Telegram really an encrypted messaging app? -
…to configure anything. Oh and since this is against APTs my work might be useful for messaging: https://github.com/maqp/tfc It's as close to NSA-proof you can get. Naturally, if the government parks their flower van across the street and…
comment by maqp · 2024-08-26 · in Essays: NSA Surveillance: A Guide to Staying Secure – Schneier on Security -
…and blogs inside Tor) https://onionshare.org/ by Micah Lee. Also has chats between user and hoster https://github.com/maqp/tfc by yours truly, crude UX but the security is unparalleled. >On a side note, I was just recommending Telegram as…
comment by maqp · 2024-08-25 · in Is Telegram really an encrypted messaging app? -
…the criticism. And I'm saying this as someone who has worked on this exact topic for ten years: https://github.com/maqp/tfc
comment by maqp · 2024-08-25 · in Is Telegram really an encrypted messaging app? -
…https://cwtch.im/ (has better UX and security than Briar) https://onionshare.org/ chat feature Also https://github.com/maqp/tfc by yours truly if you need hardware-enforced endpoint security for your keys.
comment by maqp · 2024-08-25 · in Is Telegram really an encrypted messaging app? -
> Putting on my tinfoil hat... Time to use tinfoil chat! https://github.com/maqp/tfc
comment by vmfunction · 2024-01-03 · in Double encryption: Analyzing the NSA/GCHQ arguments against hybrids -
…see if there's a milder approach here but I don't see anyway to get around the endpoint security. https://github.com/maqp/tfc
comment by jazzyjackson · 2023-08-06 · in Cult of the Dead Cow wants to save internet privacy with new encryption protocol -
>No e2ee app has compromised device part of their threat model. Oh really, here's one I made earlier https://github.com/maqp/tfc :-) >The whole OS can. So how are you backdooring a bash script that comments out lines of code from Linux…
comment by maqp · 2023-07-19 · in Signal president says company will not comply with U.K. ‘mass surveillance’ law -
…to prevent your keys from getting exfiltrated. Qubes qrexec could similarly isolate the components. https://github.com/maqp/tfc
comment by jazzyjackson · 2023-05-11 · in Testing a new encrypted messaging app's extraordinary claims -
…an exploit/malware, there is no physical connection that allows unencrypted data to be exfiltrated. https://github.com/maqp/tfc
comment by jazzyjackson · 2022-12-07 · in Apple introduces end-to-end encryption for backups -
…(And finally, you can get remote exfiltration security for keys/plaintexts with TFC https://github.com/maqp/tfc (my personal work), at the cost of losing some features like message forwarding etc that the architecture prevents you from…
comment by maqp · 2022-11-20 · in Briar: Peer-to-Peer Encrypted Messaging -
Most secure/private chat application I know of is tinfoil chat: https://github.com/maqp/tfc
comment by ycuser2 · 2022-08-05 · in How to use an iPad as a secure calling and messaging device -
Tin foil chat! https://github.com/maqp/tfc
comment by ycuser2 · 2022-04-19 · in UK Government Officials Infected with Pegasus -
…indeed. It's not just spies. My work wrt endpoint secure comms is FOSS and free for anyone to use https://github.com/maqp/tfc (the HW costs a bit naturally but in other respects).
comment by maqp · 2021-12-28 · in FBI document shows what data can be obtained from encrypted messaging apps -
…model, you'll be pleased to know I've spent the past decade looking into how to address the problem https://github.com/maqp/tfc
comment by maqp · 2021-12-28 · in FBI document shows what data can be obtained from encrypted messaging apps -
…at how far security design in secure messaging rabbit hole goes, my research might be of interest https://github.com/maqp/tfc >being of russian origin No please don't take my comments to infer anything from something being of Russian…
comment by maqp · 2021-07-19 · in Cryptographers unearth vulnerabilities in Telegram's encryption protocol -
…and having all sorts of nice qualities. From an security aesthetics POV, I love projects like https://github.com/maqp/tfc . What other projects like this are there?
comment by imagineerschool · 2021-05-29 · in Ask HN: Alternatives to Email? -
Do you know of some interesting research in this area besides maqp's https://github.com/maqp/tfc ?
comment by ysnp · 2021-05-17 · in The PGP Problem: A Critique (2020) -
…some assumptions it's provably secure against remote key exfiltration. See my work on TFC here: https://github.com/maqp/tfc
comment by maqp · 2020-08-30 · in Horcrux Encrypted Messaging -
…me into some square of caring only about E2EE. All I can say to you is, first things first. [1] https://github.com/maqp/tfc
comment by maqp · 2020-08-22 · in Telegram messaging app proves crucial to Belarus protests -
…at all. It's already available. https://cwtch.im/ https://briarproject.org/ https://ricochet.im/ https://github.com/maqp/tfc
comment by maqp · 2020-08-22 · in Telegram messaging app proves crucial to Belarus protests -
…work exclusively via Tor if you want to hide metadata. wrt that, you might find my work interesting https://github.com/maqp/tfc "Briar fails unless you only talk to people using smartphones." A picture is worth a thousand words…
comment by maqp · 2020-08-03 · in Briar Project -
…SD cards for single-use data transfer. But transferring anything but plain text is dangerous. 0) https://github.com/maqp/tfc
comment by mirimir · 2020-06-18 · in State of Linux Desktop Security -
…devices with automated ciphertext transmission. I've been working on something that does this http://github.com/maqp/tfc and that can be plugged to almost any transport system with relative ease. The current design is using v3 onion…
comment by maqp · 2020-04-09 · in Signal threatens to dump US market if EARN IT act passes -
…secure architecture to protect against remote key exfiltration, see my work on TFC for example: https://github.com/maqp/tfc "All I know is that if I ever created an app and ran a company and acted with the best intentions for my users" The…
comment by maqp · 2020-01-04 · in ToTok, an Emirati messaging app, is the latest escalation of a digital arms race -
…TCB splitting and isolation), I wanted to be completely transparent about the threat model: https://github.com/maqp/tfc/wiki/Threat-model I knew not everyone would read it but not including it could do more damage to the user. I could've…
comment by maqp · 2019-11-09 · in On Safety Critical Software -
…a really tough problem but I have a pet-project that pushes the price per endpoint just below $500 https://github.com/maqp/tfc
comment by maqp · 2019-11-02 · in Encrypted web traffic now exceeds 90% -
…maid attacks is practical. It just can't be done to a billion people at the same time. Read here https://github.com/maqp/tfc/wiki/Threat-model for an overview of all the ways an all-out, unusually secure encryption system (encryption and…
comment by hnuser54 · 2019-10-04 · in Ask HN: What are your arguments in favor of end-to-end encryption? -
…as well. And you could generalize for web browsing etc. Maybe also use ideas from Qubes Air. 0) https://github.com/maqp/tfc
comment by mirimir · 2019-08-29 · in Building a Raspberry Pi 3B+ full keyboard handheld -
…equipment for measuring RF leakage among SoCs. So it goes. Maybe the Qubes team will do it :) 0) https://github.com/maqp/tfc
comment by mirimir · 2017-06-09 · in x86: Approaching 40 and still going strong