Digital Control vs. Peer-to-Peer Resilience: India Orders GitHub to Pull Bitchat

Things are shifting rapidly. We are witnessing a fascinating tug-of-war between centralized digital control and decentralized, offline resilience.

1. The Tech: Jack Dorsey's "Bitchat"

Developed by Jack Dorsey and the team at Permissionless Tech, Bitchat is an open-source, peer-to-peer messaging app designed to operate without central authority.

• How It Works: It uses Bluetooth Low Energy (BLE) mesh networking to hop messages device-to-device across local physical proximity -- requiring no cell towers, Wi-Fi, central servers, phone numbers, or accounts. Messages relay up to 7 hops.

• The Fallback: When an internet connection is available, Bitchat automatically routes long-distance traffic through global Nostr protocol relays.

• Privacy & Security: Private/direct messages use Noise Protocol encryption (Curve25519 + ChaCha20-Poly1305) with forward secrecy. Public local chat rooms are unencrypted broadcast by design, since they're meant for open proximity chat rather than sensitive traffic. Data lives only in ephemeral local memory, and a triple-tap on the app logo triggers an instant, no-confirmation panic wipe that clears keys and message history.

Inference-labeled caveat: the project has not yet had a full external security review. Researchers (notably Alex Radocea) flagged an impersonation vulnerability and a buffer-overflow bug shortly after the TestFlight launch; Dorsey's team patched both, and GitHub still carries an advisory against relying on private messages for high-sensitivity cases pending full review.

2. The Takedown Order & The Jantar Mantar Protests

The Takedown Order: At 11:16 p.m. IST on July 23, 2026, India's Cyber Crime Coordination Centre (I4C) issued Notice No. 11072601011432, giving GitHub a three-hour window to disable three Bitchat repositories under Section 79(3)(b) of the IT Act, 2000, read with Rule 3(1)(d) of the IT Rules 2021. The order targeted three repos under the permissionlesstech account -- the main project, the Android build, and the Android releases page -- threatening GitHub with loss of its safe-harbour intermediary protections and potential criminal liability for non-compliance.

• The Trigger: Demonstrators from the Cockroach Janta Party camped at Delhi's Jantar Mantar over alleged 2026 NEET medical exam irregularities turned to Bitchat after authorities activated mobile jammers and suspended mobile internet in a 1.5 km radius around Jantar Mantar and Connaught Place from 4:00 p.m. to midnight on July 23.

• How It Surfaced: No government copy of the notice was published. The order became public only after Dorsey posted screenshots of the directive on X on July 24, writing: "The government of India does not like technologies like Bitchat and wants it taken down."

• Legal Backlash: The Internet Freedom Foundation (IFF) called the order unconstitutional. Citing the Supreme Court's Anuradha Bhasin v. Union of India proportionality standard, IFF noted the notice targets underlying software architecture rather than any specific unlawful content -- a legal logic that could extend just as easily to Bitcoin nodes or Nostr relays generally.

• Open Source Reality: Deleting GitHub repositories cannot disable existing local installs, stop source code already cloned or forked across mirrors, or prevent direct APK side-loading over BLE mesh.

3. The Bigger Picture: CBDCs vs. Peer-to-Peer Mesh

This incident isn't isolated -- China's Cyberspace Administration similarly ordered Apple to remove Bitchat from the China App Store in April 2026, pointing to a growing pattern of state pushback against serverless tools.

As governments expand digital control mechanisms like CBDCs and localized network blackouts, open-source developers are building architecture engineered to keep operating when the plug gets pulled.