semisol
· 3w
This is a problem with Maple.
A TEE has no persistent memory. All persistent state needs to be outside the TEE, and data and encryption keys must be reinjectef on each startup if there is any state.
...
Maple is actively putting its users, which surely include human rights activists, whistleblowers, and more at significant risk.
It is not “throwing shade at privacy tools” to inform users of the risk, especially for a tool which is in my opinion very deceptive about its marketing.
When a security researcher reports an issue, the company is responsible for fixing it, not the reporter. They have no obligation to do free labor for a company.