Software engineering is so often dominated by a move fast and break things mentality, driven by a rush to deploy and scale and profit, with the ability to fix problems with later updates. It’s a very immature process compared to every other engineering domain, because fix-it-later is much more difficult, expensive, and dangerous when it’s a bridge, building, airplane, or anything else tangible (although Boeing did a great job of destroying engineering process and accountability after the MBAs took control away from the engineers).
The work detailed in this Signal blog post is clearly slow and methodical, with continual checks for correctness and curiosity for optimal solutions driving careful experimentation. Building on existing proven PQ standards and keeping their refinements open for public academic feedback is wonderfully responsible. Building formal correctness proofs into CI and blocking trunk merges is spectacular.
They’re doing everything right, even years after Moxie Marlinspike’s departure. Bravo! Working this way is very expensive and requires absolute support from upper management. I’m definitely a fanboy for Meredith Whittaker and the direction she’s running the organization. Hell yeah!
I’m still convinced that Signal is an NSA honeypot.
It’s actually way simpler than that. It was funded by the CIA for a long time because it was used to support insurgencies that the CIA was into. They pulled that a while back because Americans were getting into it, hence all the calls for donations in the past several years.
Too bad I forgot where I heard this. May not be true, idk, who knows these days. But it makes sense.
Yeah there was some Radio Free Asia money connection with the open whisper system that now is Signal.
