Forgot your password?
typodupeerror
AI

Signal Creator Marlinspike Wants To Do For AI What He Did For Messaging 34

Moxie Marlinspike, the engineer who created Signal Messenger and set a new standard for private communications, is now trialing Confer, an open source AI assistant designed to make user data unreadable to platform operators, hackers, and law enforcement alike. Confer relies on two core technologies: passkeys that generate a 32-byte encryption keypair stored only on user devices, and trusted execution environments on servers that prevent even administrators from accessing data. The code is open source and cryptographically verifiable through remote attestation and transparency logs.

Marlinspike likens current AI interactions to confessing into a "data lake." A court order last May required OpenAI to preserve all ChatGPT user logs including deleted chats, and CEO Sam Altman has acknowledged that even psychotherapy sessions on the platform may not stay private.
This discussion has been archived. No new comments can be posted.

Signal Creator Marlinspike Wants To Do For AI What He Did For Messaging

Comments Filter:
  • by Valgrus Thunderaxe ( 8769977 ) on Tuesday January 13, 2026 @11:35AM (#65920800)
    Why is this even happening to begin with?
    • I would whole-heartedly support a ban on AI chatbots providing medical advice until their operators accept liability for malpractice and acknowledge their duty to comply with HIPAA.

      Which will not happen any time soon, not for free public services.

      People get crazy ideas about how private, trustworthy, or knowledgeable AI is. The truth is the same for all three traits: good enough to make you feel safe, and bad enough to be dangerous.

  • While I think it's good to have more good options, Proton's Lumo is an established product that already does what Confer is trying to do by a time tested privacy protecting organization.
    • Doesn't use SEV/TDX/TDISP with remote attestation though.

      Though TDISP is going to rely an expensive server farm, only supported on Blackwell for the moment (transport/GPU level TEE, Confer doesn't seem to be using it yet).

  • by Pinky's Brain ( 1158667 ) on Tuesday January 13, 2026 @12:44PM (#65921036)

    What will the terms of use be? How will payment go? How much information will users have to hand over to get access? Mr. privacy is not anonymity doesn't seem a big freedom lover to me?

    What if some public service which he doesn't like start using it? (Porn, right wingers, whatever.) Is he going to do traffic level analysis to find and ban them?

    • by kubajz ( 964091 )

      All good questions, and I would kind of expect Moxie Marlinspike to not be surprised by them... For example, knowing who pays for the service and uses it is quite different from knowing what information they feed the service and what replies they are getting. I would not mind the first, I would mind the second. And yes, if you do not know what people are doing with your service, they can do illegal things - kind of like Signal does not prevent "right wingers" from using it.

      What seems interesting is the des

  • AI is already consuming way too many resources and undoing all previous efforts to save the environment through energy efficiency measures. Let's add encryption overhead to the energy consumption footprint.
    • By your logic, there should be no privacy because encryption uses power. Who deserves privacy in your opinion? I do agree we are wasting power on AI.

  • Note, haven't familiarized myself with the details of how the encryption of this platform works. Nonetheless, when I read this, I thought: this would be the perfect implementation of homomorphic encryption (HE). Briefly, HE allows cipher texts to be calculated on without decrypting them. For instance, a user could send an encrypted message to a cloud provider, it could then be calculated on in the cloud, without ever decrypting it, and the result could be sent back to the user, who could then decrypt the re

  • AI is pretty useless so I don't have a use for it no matter how private it is.

  • I hope that he is successful and that it becomes wide spread.

    But, they'll never allow it.

  • When I send data to Google, my mistrust is entirely with Google. Sure, it's possible that government, network, and hackers could read my data, but relatively speaking, I don't care. My mistrust of Google far overshadows what the others might do. Google has access to 100% of my AI data all the time, and they have the financial motivation to misuse it.

  • by bill_mcgonigle ( 4333 ) * on Tuesday January 13, 2026 @07:30PM (#65922492) Homepage Journal

    I clicked through, it demanded a Google auth or email, I closed the window.

    Truly private. OK, then.

Don't be irreplaceable, if you can't be replaced, you can't be promoted.

Working...