Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Bitpart: 5-In-1 Platform for Activism Over Signal

Josh King

PrivacyTalks44 minIntermediateOpen on YouTube ↗

Where

Talks
HOPE_16

Duration

44 min

Shows how Bitpart runs one-to-many Signal bots for tiplines, help desks, broadcasts, and eSIM and VPN code distribution.

Summary

Josh King, a developer at Throneless Tech, introduces Bitpart, a Rust-based platform for building one-to-many messaging bots on top of Signal. He traces the project back to an earlier prototype that proved hard to maintain, then describes interviews with activists, journalists and tool builders in eleven countries that shaped the design. Those participants wanted a route to a human operator, explicit consent before anyone is messaged, and no AI posing as a person.

The platform covers five workflows: broadcast lists, anonymous tiplines, a help desk with scripted answers that escalates to an operator, and distribution of prepaid VPN codes and eSIMs. Bot logic is written in a scripting language so contributors need not write Rust. Each bot uses its own Signal account and only replies to people who have contacted it first, which limits spam. Data storage is minimal and encrypted, yet the operator can read message contents. A questioner argued that centrally held identifiers could be exposed through subpoenas to Signal, and that point stayed open.

Other questions covered threat models across very different countries, scaling against Signal's rate limits, and the risk of protocol changes breaking compatibility. Bitpart is AGPLv3 licensed, with a hosted service planned alongside self-hosting on a server or an old laptop. The practical takeaway is to map the threat model and decide who holds which data before building tools for at-risk communities.

Related talks