@zchat_app

private messenger on zcash rails. android. no phone number, messages travel as shielded transactions. sharp takes on privacy and zcash. https://xitter.cf/t.co/poNU1jeTqA

 not in EU
zsend.xyz
Joined December 2024
  • Tweets9.7K
  • Following174
  • Followers484
104Media
three months ago every zchat message was a zcash transaction. today it's free instant e2e chat, groups, encrypted voice and video calls, and the most-audited zchat yet, here's what shipped april to july:
1
3
285
Zchat | Shielded messenger retweeted
Brave
@braveOct 9
Financial data can be used to profile and influence users. Mark Henderson, Engineering Manager at Shielded Labs, explains on #TheBraveTechnologist podcast that financial systems need privacy built into the protocol. Users can't just rely on companies' promises to respect their data. Other topics in this episode: - Why Zcash’s renewed momentum reflects growing demand for privacy-focused technology - How Zcash is planning for long-term sustainability - What Crosslink could bring to Zcash by combining proof-of-work with a proof-of-stake finality mechanism Check out this full episode, hosted by @LukeMulks, here: brave.com/podcast/e141/
6
12
111
11,615
pls join the rehearsal of the coming 5-digits party: xitter.cf/i/broadcasts/1rxmqpbap…
0:00

Michelangelo.zec ⓩ🛡️

$ZEC Zcash $1000 Party

2
222
zchat installs from a direct github download, signed with a permanent rsa-4096 key, and one command - apksigner verify - proves the apk is ours before you install. don't trust a download page, verify a certificate
1
3
107
the orchard counterfeiting vulnerability (ghsa-ghc3-g8w4-whf9): we audited zchat's whole stack against it, and the shipping app runs sdk 2.5.2 with the fixed halo2/orchard crates, not affected. if your money app didn't publish its answer to this, ask why
1
64
audit finding worth naming: corrupt zchat's ratchet counter store and aes-gcm nonces could repeat, a real confidentiality break invisible in normal use, now fixed with dedicated tests on that exact corner. the bugs you can't see in the ui are the ones that matter
1
49
we gave two rival ai auditors - openai's codex and xai's grok - read-only access to zchat and one instruction: break it. 65 findings later the confirmed critical is fixed, both verified 495/495 tests green, and adversaries make better reviewers than fans
37
we wrote down all 285 bugs we've ever fixed and turned them into a checklist the app must pass before every release. boring, and the reason updates stopped breaking old fixes
1
39
most apps show a lock icon because it's reassuring. we removed ours wherever it wasn't true: zchat refuses to display "encryption: on" for any chat it cannot actually decrypt
1
49
voice and video calls in zchat are e2e encrypted (dtls-srtp) and signalled over nostr. we run our own relay and turn server, and zchat only ever hands them ciphertext
1
68
group chat admin actions in zchat are signed: a kick or key rotation only counts if the admin's key signed it, and an invite is compact enough to fit inside a single 512-byte zcash memo
1
63
one shielded handshake buys you a private introduction, then messages travel free - e2e encrypted over nostr, no phone number, no server account. the blockchain is the handshake, not the pipe
1
75
"nobody will pay to text" - agreed, and zchat's open mode starts a free end-to-end encrypted chat from message one. the zcash chain only comes in when you want money or maximum privacy
52
group chats shipped with signed admin controls - a kick or key rotation only counts if the admin's key signed it, and invites fit in a single zcash memo. voice and video calls run e2e over webrtc, signalled on nostr, on our own relay and turn server
1
55
we rebuilt the ui to stop lying: the badge no longer says encryption on for a chat that can't decrypt, destroy-all says exactly what it destroys, and sending zec gives honest feedback, no optimistic guesses
1
26
from complement to priority $ZEC
Chris Burniske
@cburniskeJul 12
Finally reading "Broken Money" by @LynAldenContact and it's a good reminder that $BTC and other internet-native hard monies will most reward the patient ($ZEC the most credible complement to $BTC, in this category). From 2016-2025 there was a wave of impatience as the promise of blockchains drew crowds of people that didn't deeply understand Bitcoin, and treated the space as simply another tech platform. Bitcoin is more of a social reboot, than a technological one, and such a reboot takes decades to play out. Now, impatience is washing out to other seemingly faster moving waters, taking us closer to what things felt like in 2015 and before... which will once again reward those that understood all along.
1
3
228
non-power-concentrating is the load-bearing qualifier, security tech that fails it becomes surveillance
zooko🛡🦓🦓🦓 ⓩ
@zookoJul 11
❤ Vitalik's epistemic humility, and his list: “formal verification, cryptography, secure and open hardware, pandemic resistance and other defensive biotech, food and basic resource security, public epistemics, non-power-concentrating versions of physical security”
1
96
the shielded pool was never the hard part, proving nobody counterfeited inside it is
BSCN
@BSCNewsJul 8
Zcash Rallies On Ironwood Breakthrough Zcash surged up to 16% after Project Tachyon reported major progress in verifying Ironwood's privacy system. The team says it is close to proving the new shielded pool cannot contain the undetectable counterfeiting flaw disclosed in Orchard. The announcement pushed $ZEC above $500 for the first time since early June.
97
nothing novel about an attention company strapping all-seeing sensors to your face
Financial Times
@FTJul 8
The social media platform has been advancing a new hardware line of all-seeing, all-hearing devices, prompting debates over how to handle novel privacy challenges. What do the prototypes reveal about the company's AI ambitions? ft.trib.al/Ans28YB
1
71
Load more