We are in a digital arms race
von Alien Investor · updated October 2026
#WhiteNoise #Nostr #Privacy #Signal #Messenger #OPSEC #Sovereignty #Bitcoin
────────────────
„White Noise is a technical attempt to shift the power balance between the state and the individual back toward the individual."
────────────────
On one side stand states and intelligence agencies pushing for "Chat Control" and client-side scanning under the banner of child protection.
On the other side are citizens insisting on a basic right: privacy.
For a long time, Signal was considered the gold standard.
But Signal has a fundamental weakness.
It is centralized.
And it requires a phone number.
Signal knows who is talking to whom.
In an era where metadata can be more dangerous than message content itself, that is no longer sufficient.
This is where White Noise enters the picture.
A messenger built on the Nostr protocol.
Backed by nonprofits and grants, not investors. No phone number. Built so that relays learn as little about you as possible.
────────────────
The Problem: Walled Gardens and the Metadata Trap
Even with WhatsApp or Signal, messages are end-to-end encrypted.
That is good — but it is not enough.
The server still sees the social graph. Even if Signal cannot read the content, it can see that you are messaging an investigative journalist at 2:00 a.m. These metadata points are often more valuable to intelligence agencies than the text itself.
There is also forced identity. A phone number is required. This permanently links your digital identity to your physical person through SIM registration and KYC processes.
And there is censorship risk. A centralized server can be shut down or blocked. An app can be removed from the Apple App Store or Google Play under political pressure.
────────────────
The Solution: White Noise and Nostr
White Noise is not a corporate platform.
It is software built on a protocol: Nostr — Notes and Other Stuff Transmitted by Relays.
There is no phone number. Your identity is a cryptographic key pair: a public key (npub) and a private key (nsec). No central authority knows who stands behind that key.
There is no central server. Messages are routed through simple relays. If one relay blocks you, you switch to another. There is no global kill switch.
This is freedom technology.
The app is published by the Internet Privacy Foundation, a nonprofit, with support from OpenSats, the Human Rights Foundation and the nonprofit "and Other Stuff". There are no investors whose business model depends on harvesting user data.
────────────────
The Technical Core: MLS and the Marmot Protocol
Nostr was originally designed like a bulletin board — closer to a Twitter alternative than a private messenger.
Early attempts at private messaging, such as NIP-04, fell well short of the cryptographic state of the art and leaked metadata.
White Noise changes this with MLS — Messaging Layer Security, IETF RFC 9420 — integrated via the Marmot Protocol.
In its early form the standard was called NIP-EE. Since December 2025, the official Nostr registry marks NIP-EE as "unrecommended" and points to Marmot. The Marmot specification itself carries the status "adopted."
Why MLS matters. MLS organizes participants in a tree structure. Key updates scale logarithmically with group size instead of linearly. Even groups with thousands of participants can be encrypted efficiently.
Forward secrecy. Even if your key is compromised today, past messages remain secure.
Post-compromise security. Keys are rotated automatically. Once that happens, an attacker is locked out again.
────────────────
Cloaking Metadata: One-Time Keys and Gift Wraps
To prevent relays from learning who is talking to whom, White Noise signs every chat message with a fresh one-time key — never with your Nostr identity.
Even a one-on-one conversation is technically a group in Marmot.
The relay sees a random group ID, a timestamp and encrypted content. Who wrote the message and who reads along is not part of it.
Invitations to a group travel as "Gift Wraps" (NIP-59). The wrapping hides the sender and the content. Only the invitee's inbox is addressed.
To the relay, the traffic looks largely like random noise.
One gap remains: your IP address.
────────────────
Infrastructure: Tor, Blossom and Notifications
Even the strongest encryption fails if your IP address is exposed.
There is no built-in Tor feature. The project's own FAQ says openly that a relay operator can see connection information such as your IP address. If you want to separate your physical location from your cryptographic identity, route the app through Orbot in VPN mode and select White Noise under "Choose Apps." Note that VPN mode occupies Android's only VPN slot — no other VPN, such as Mullvad, can run at the same time.
Media goes through Blossom servers. Images and voice messages are encrypted before upload. The server stores only unreadable data. For now the app picks the Blossom servers itself — the Android app has no setting for your own server yet. Relays, on the other hand, are freely configurable.
Notifications. Real push notifications on Android run through Google's push service, relayed by a service of the publisher. On GrapheneOS they only work with Sandboxed Google Play — and if it is installed, White Noise turns them on at first launch. You can switch them off at any time. Without Google Play, the app keeps a persistent connection to the relays and announces new messages locally, with no Google involved. Telemetry is off by default.
────────────────
Where to Get It: Zap Store and GitHub
White Noise was rebuilt from the ground up in 2026. Since September 2026 there are native apps for Android and iOS — both still in beta.
What happens if Apple or Google remove the app because it refuses to implement backdoors?
The project publishes the Android app in the Zap Store itself, signed with its own Nostr key. The app page marks it as "Published by Developer", and the publisher is the White Noise Nostr profile. As long as a single relay hosts the manifest, the app remains accessible.
The APKs are also on GitHub, so Obtainium can keep the app up to date. On the iPhone, White Noise is so far only available through TestFlight.
⚠ Switching from the old app: The new app has a new package name (dev.ipf.whitenoise.android instead of org.parres.whitenoise). The old app will not receive any more updates, and the new one carries over neither chats nor groups. Back up your private key (nsec) first, unless it already lives in Amber. Install the new app alongside the old one, and remove the old one only once everything works.
Gatekeepers are bypassed by design.
────────────────
Further Reading
👉 White Noise App (official site — iOS TestFlight & Android): https://www.whitenoise.chat/download 👉 White Noise in the Zap Store: https://zapstore.dev/apps/dev.ipf.whitenoise.android 👉 GitHub releases (source for Obtainium): https://github.com/marmot-protocol/whitenoise-android/releases 👉 Marmot Protocol specification: https://github.com/marmot-protocol/marmot
────────────────
Verdict: Sovereignty Is Not a Feature — It Is Work
White Noise is not a "click-and-ready" replacement for WhatsApp.
Key management and routing the app through Tor require basic technical competence.
But it is currently one of the strongest architectural answers to the surveillance state.
If authorities demand chat control, White Noise cannot cooperate by design. There is no central server that messages depend on, and no executive who could hand over chats.
For journalists, activists, and people who want real ownership of their data, White Noise is a lighthouse.
It demonstrates that privacy in the 21st century is possible — if we are willing to leave the comfortable cages of Big Tech.
────────────────
The Foundation: Turn Your Phone into a Digital Bunker
A secure messenger is only half the equation.
If your operating system logs keystrokes or takes screenshots, encryption alone is meaningless.
Running White Noise on an insecure device is like installing a steel door in a house of cards.
True sovereignty requires a hardened operating system. For me, that foundation is GrapheneOS.
For a deeper technical breakdown of why standard smartphones are surveillance devices — and how GrapheneOS hardens Android at every layer — see:
👉 GrapheneOS: Hardened Android for the Surveillance Age: https://primal.net/Alien-Investor/grapheneos-hardened-android-for-the-surveillance-age
────────────────
🧰 Tools for True Owners (Affiliates — Support at No Extra Cost)
Tools I use myself — for Bitcoin self-custody and digital sovereignty:
📕 Alien Investor Guides: My own eBook "GrapheneOS: Android in the Age of Surveillance" — the complete step-by-step guide to everything only touched on here. 👉 https://alien-investor.org/buecher
🔧 Alien Phone Service — GrapheneOS professionally installed and configured, delivered to your door. No flashing required. Bitcoin or Fiat. 👉 https://alien-investor.org/en/grapheneos-flash-service.html
💥 21bitcoin: Bitcoin-only app from Europe, ideal for DCA and stacking sats regularly — no shitcoins. Use code ALIENINVESTOR for a permanent 0.2 percentage point fee reduction on instant and savings plan purchases. 👉 https://alien-investor.org/21bitcoin
₿ BitBox: Hardware wallet for secure self-custody. I use the BitBox — available as the classic BitBox02 and the new BitBox for iPhone (Nova). Use code ALIENINVESTOR for 5% off. 👉 https://alien-investor.org/bitbox
🛡️ Proton: Swiss all-round protection for email, VPN, and cloud — privacy-first, no Big Tech dependency. 👉 https://alien-investor.org/proton
Disclaimer: Some of these links are affiliate links. If you use them, you support my work at no extra cost to you. Thank you!
────────────────
Money, power, Bitcoin — and OPSEC. I write about financial sovereignty, privacy, and cybersecurity in a world built on control. More at alien-investor.org 👽
Comments2
Clint™️
···
sawzall
···