MIT messaging system (SOSP 2015) with cryptographic dead-drops plus differential-privacy-style noise. Hides not just message content but the social graph and conversation patterns — what observers learn about who's talking to whom is statistically bounded. Influenced Stadium and Karaoke follow-ups; not deployed.