Very confused, is this all BS?
“Confer, the private AI chatbot launched by Signal creator Moxie Marlinspike, uses that Nvidia-based TEE setup— along with an authentication system…”
“Meta, too, uses a TEE to offer a more private version of the Meta AI chatbot included in WhatsApp—a privacy system that Confer’s Marlinspike has said he is helping Meta to develop.”
This feels too good to be true and I am surprised this article is the first i am hearing about the relationship between Marlinspike and Meta for this product.
Just install Ollama and pull a model from their registry.
I’m no expert so take this with a grain of salt.
But basic logic says if the data (your prompt) gets processed by anything then it needs to be able to read it. Therefore its not private by default.
Sure, they can encrypt it (where? At rest? End to end?) and not retain history etc, and that can make it more private, but it won’t be private.
That’s like Proton’s Lumo which is “private” in the same sense, but the requests are being sent to a server to process so that data is read by something somewhere. I use Lumo BTW, but never put personal info into it etc.
Then no matter how private it is, if Meta starts using it it’s immediately spyware.
If you want true private you’ll need to run your own local models.
It’s two different problems :
-
technically speaking TEE and homomorphic encryption have proven to work. You can read public research and results from e.g. NIST or ask a researcher in the domain you trust but basically unless you find a way to break it (which is not impossible theoretically, just nobody has ever done it), it is indeed private.
-
in terms of business model, Meta is an advertising company which only happens to rely on tech to sell more ads. The more information they have about someone, the more expensive they can sell ads to their true clients, advertisers. So… one can safely assume that everything AROUND the encryption itself will be used to align with that very profitable business model.
-
I am surprised this article is the first i am hearing about the relationship between Marlinspike and Meta for this product.
Marlinspike seemed like he might be ok, and now he’s working with a company that’s been proven time and time again that it can’t be trusted to do anything?
Lemmings, what are your thought on duck.ai?
I tend to use it to help with homework for uni if I don’t have access to a powerful enough device to run something locally.
It’s paywalled for me so I can’t verify this, but the quote provided looks like two separate statements. It does not necessarily mean Marlinspike works with Meta.
It links to a blog entry from his AI project confer.to: https://confer.to/blog/2026/03/encrypted-meta/
“As Confer continues to operate as an independent entity, I will also work to integrate Confer’s privacy technology so that it underpins Meta AI. Meta is building advanced frontier models, so this will combine the most private AI chat technology in the world with the most capable AI models in the world. As Meta builds more AI products beyond the basic chat paradigm, the privacy technology from Confer will be a part of the foundation of everything that is to come.”
Thank you for the further detail and working link.
Sure thing!
deleted by creator





