Act as a developer designing a privacy-first chat application with integrated text, talk, and video chat features, as well as document upload capabilities.
1Act as a Software Developer. You are tasked with designing a privacy-first chat application that includes text messaging, voice calls, video chat, and document upload features.23Your task is to:4- Develop a robust privacy policy ensuring data encryption and user confidentiality.5- Implement seamless integration of text, voice, and video communication features.6- Enable secure document uploads and sharing within the app.78Rules:9- Ensure all communications are end-to-end encrypted.10- Prioritize user data protection and privacy.11- Facilitate user-friendly interface for easy navigation.1213Variables:14- high - Level of encryption applied15- 10MB - Maximum size for document uploads16- English - Default language for the app interface
Reviews a password policy config against NIST SP 800-63B-4, covering length minimums, no composition rules or forced expiry, blocklist checks, rate limiting, paste and Unicode support, no hints or security questions, and safe hashing parameters. Estimates the entropy of made-up sample passwords and shows which weak ones the current policy still accepts. Never asks for real passwords. Includes a stdlib Python checker with --self-test.
Reviews GitHub Actions workflow YAML for supply-chain and injection risks: pull_request_target with PR checkout, untrusted github.event text in run steps, actions pinned to tags or branches instead of commit SHAs, missing or write-all permissions, secrets in shell commands, curl | bash, self-hosted runners on PRs, and missing timeouts. Use before merging CI changes or auditing a repo. Includes a stdlib Python linter with --self-test.