My worry about the future of Keybase ๐
May 17, 2020โข510 words
When I heard that Zoom had acquired Keybase last week, my initial reaction was that it was a prank.
A bit of background
Keybase is a cryptography-based platform, where you control your private keys and use them to encrypt files, messages and more. It's mostly used by techy people and the privacy-conscious. Personally, I've been a big fan, and user of keybase for the past 4 years.
And Zoom, it seemed to come from nowhere when lockdown started, suddenly it was super popular: it has allowed us to stay in touch with our friends and family, for free and with excellent video quality. But it seems that nearly everyday recently, there's been another critical security issue with Zoom, they don't come across as a company that values the privacy of their users.
My Worries about the future of Keybase
This is an extract from the acquisition article posted on Keybase:
"Initially, our single top priority is helping to make Zoom even more secure. There are no specific plans for the Keybase app yet. Ultimately Keybase's future is in Zoom's hands, and we'll see where that takes us. Of course, if anything changes about Keybaseโs availability, our users will get plenty of notice."
This is what worries me about the above quote:
- "๐๐ถ๐ณ ๐ด๐ช๐ฏ๐จ๐ญ๐ฆ ๐ต๐ฐ๐ฑ ๐ฑ๐ณ๐ช๐ฐ๐ณ๐ช๐ต๐บ ๐ช๐ด ๐ฉ๐ฆ๐ญ๐ฑ๐ช๐ฏ๐จ ๐ต๐ฐ ๐ฎ๐ข๐ฌ๐ฆ ๐ก๐ฐ๐ฐ๐ฎ ๐ฆ๐ท๐ฆ๐ฏ ๐ฎ๐ฐ๐ณ๐ฆ ๐ด๐ฆ๐ค๐ถ๐ณ๐ฆ" - Implies, that the KeyBase team will now be working on the Zoom platform, and not Keybase.
- "๐๐ท๐ฆ๐ฏ ๐ฎ๐ฐ๐ณ๐ฆ ๐ด๐ฆ๐ค๐ถ๐ณ๐ฆ" - HA! They are pretending Zoom is secure
- "๐๐ฉ๐ฆ๐ณ๐ฆ ๐ข๐ณ๐ฆ ๐ฏ๐ฐ ๐ด๐ฑ๐ฆ๐ค๐ช๐ง๐ช๐ค ๐ฑ๐ญ๐ข๐ฏ๐ด ๐ง๐ฐ๐ณ ๐ต๐ฉ๐ฆ ๐๐ฆ๐บ๐ฃ๐ข๐ด๐ฆ ๐ข๐ฑ๐ฑ ๐บ๐ฆ๐ต" - this doesn't sound good
- "๐๐ญ๐ต๐ช๐ฎ๐ข๐ต๐ฆ๐ญ๐บ ๐๐ฆ๐บ๐ฃ๐ข๐ด๐ฆ'๐ด ๐ง๐ถ๐ต๐ถ๐ณ๐ฆ ๐ช๐ด ๐ช๐ฏ ๐ก๐ฐ๐ฐ๐ฎ'๐ด ๐ฉ๐ข๐ฏ๐ฅ๐ด" - FUCK
- "๐ช๐ง ๐ข๐ฏ๐บ๐ต๐ฉ๐ช๐ฏ๐จ ๐ค๐ฉ๐ข๐ฏ๐จ๐ฆ๐ด ๐ข๐ฃ๐ฐ๐ถ๐ต ๐๐ฆ๐บ๐ฃ๐ข๐ด๐ฆโ๐ด ๐ข๐ท๐ข๐ช๐ญ๐ข๐ฃ๐ช๐ญ๐ช๐ต๐บ" - Makes it sound like Keybase could one day be discontinued
And from the Zoom blog post:
- "๐๐ฆ ๐ข๐ณ๐ฆ ๐ฆ๐น๐ค๐ช๐ต๐ฆ๐ฅ ๐ต๐ฐ ๐ช๐ฏ๐ต๐ฆ๐จ๐ณ๐ข๐ต๐ฆ ๐๐ฆ๐บ๐ฃ๐ข๐ด๐ฆโ๐ด ๐ต๐ฆ๐ข๐ฎ ๐ช๐ฏ๐ต๐ฐ ๐ต๐ฉ๐ฆ ๐ก๐ฐ๐ฐ๐ฎ ๐ง๐ข๐ฎ๐ช๐ญ๐บ" - Yup, they bought Keybase just to use their engineers
- "๐๐ฉ๐ช๐ด ๐ข๐ค๐ฒ๐ถ๐ช๐ด๐ช๐ต๐ช๐ฐ๐ฏ ๐ฎ๐ข๐ณ๐ฌ๐ด ๐ข ๐ฌ๐ฆ๐บ ๐ด๐ต๐ฆ๐ฑ ๐ง๐ฐ๐ณ ๐ก๐ฐ๐ฐ๐ฎ ๐ข๐ด ๐ธ๐ฆ ๐ข๐ต๐ต๐ฆ๐ฎ๐ฑ๐ต ๐ต๐ฐ ๐ข๐ค๐ค๐ฐ๐ฎ๐ฑ๐ญ๐ช๐ด๐ฉ ๐ต๐ฉ๐ฆ ๐ค๐ณ๐ฆ๐ข๐ต๐ช๐ฐ๐ฏ ๐ฐ๐ง ๐ข ๐ต๐ณ๐ถ๐ญ๐บ ๐ฑ๐ณ๐ช๐ท๐ข๐ต๐ฆ ๐ท๐ช๐ฅ๐ฆ๐ฐ ๐ค๐ฐ๐ฎ๐ฎ๐ถ๐ฏ๐ช๐ค๐ข๐ต๐ช๐ฐ๐ฏ๐ด ๐ฑ๐ญ๐ข๐ต๐ง๐ฐ๐ณ๐ฎ" - I don't think they have any intention of creating a "truly private" platform. And the word "attempt" doesn't exactly instill confidence in me
- "๐๐ถ๐ณ ๐จ๐ฐ๐ข๐ญ ๐ช๐ด ๐ต๐ฐ ๐ฑ๐ณ๐ฐ๐ท๐ช๐ฅ๐ฆ ๐ต๐ฉ๐ฆ ๐ฎ๐ฐ๐ด๐ต ๐ฑ๐ณ๐ช๐ท๐ข๐ค๐บ ๐ฑ๐ฐ๐ด๐ด๐ช๐ฃ๐ญ๐ฆ ๐ง๐ฐ๐ณ ๐ฆ๐ท๐ฆ๐ณ๐บ ๐ถ๐ด๐ฆ ๐ค๐ข๐ด๐ฆ, ๐ธ๐ฉ๐ช๐ญ๐ฆ ๐ข๐ญ๐ด๐ฐ ๐ฃ๐ข๐ญ๐ข๐ฏ๐ค๐ช๐ฏ๐จ ๐ต๐ฉ๐ฆ ๐ฏ๐ฆ๐ฆ๐ฅ๐ด ๐ฐ๐ง ๐ฐ๐ถ๐ณ ๐ถ๐ด๐ฆ๐ณ๐ด ๐ข๐ฏ๐ฅ ๐ฐ๐ถ๐ณ ๐ค๐ฐ๐ฎ๐ฎ๐ช๐ต๐ฎ๐ฆ๐ฏ๐ต ๐ต๐ฐ ๐ฑ๐ณ๐ฆ๐ท๐ฆ๐ฏ๐ต๐ช๐ฏ๐จ ๐ฉ๐ข๐ณ๐ฎ๐ง๐ถ๐ญ ๐ฃ๐ฆ๐ฉ๐ข๐ท๐ช๐ฐ๐ณ ๐ฐ๐ฏ ๐ฐ๐ถ๐ณ ๐ฑ๐ญ๐ข๐ต๐ง๐ฐ๐ณ๐ฎ" - When they talk about "balancing" the needs of customers, this implies that they will not be aiming for true end-to-end encryption and anonymity, it could be possible but I doubt Zoom will peruse that path
I know all this is just legal speak, and they have to word it in this way to cover themselves, but too me this is worrying. I'd come to love Keybase over the years, the team behind it are very talented, and have done an amazing job. It's going to be sad to say goodbye, but for now I'm going to enjoy it while I can :)