Mastodon

Kevin Karhan :verified:<a href="https://toot.cat/@jamey" class="u-url mention" rel="nofollow noopener" target="_blank">@jamey</a> yeah.That's why I don't.fo <a href="https://infosec.space/tags/TechSupport" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechSupport</a>: I don't have spoons.to deal with <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> and <a href="https://infosec.space/tags/Normies" class="mention hashtag" rel="nofollow noopener" target="_blank">#Normies</a> that insult my intellect and refuse to follow simple instructions!

Kevin Karhan :verified:<a href="https://infosec.exchange/@Andromxda" class="u-url mention" rel="nofollow noopener" target="_blank">@Andromxda</a> <a href="https://fosstodon.org/@mollyim" class="u-url mention" rel="nofollow noopener" target="_blank">@mollyim</a> no it's not bs and fanboying <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> <a href="https://www.youtube.com/watch?v=tJoO2uWrX1M" rel="nofollow noopener" target="_blank">isn't going to change that</a>.If <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> was secure it would be the #1 comms tool of organized crime...<ul><li>Yet I've only seen <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> shill it.</li></ul>Real professionals use <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> capable, fully <a href="https://infosec.space/tags/FLOSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#FLOSS</a>'d solutions like <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PGP</a>/MIME & <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a>.<ul><li>Again: Demanding <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> like <a href="https://infosec.space/tags/PhoneNumbers" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumbers</a> and shilling a <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Shitcoin</a>-<a href="https://infosec.space/tags/Scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Scam</a> (<a href="https://infosec.space/tags/MobileCoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#MobileCoin</a>) makes Signal literally untrustworthy and if it doesn't for you then maybe your standards are just too low... </li></ul>It's just me reading the room: Cuz <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> isn't done woth "JuSt UsE sIgNaL!" and everyone who claims so without pointing out <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> & <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsec</a> is BSing hard.<ul><li>The cold hard truth is that <a href="https://infosec.space/tags/TechLiteracy" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechLiteracy</a> is irreplaceable and the only solution to it is to actually teach normies how to "get gud" with stuff like PGP.</li></ul>Fortunatelty, <a href="https://mastodon.online/@thunderbird" class="u-url mention" rel="nofollow noopener" target="_blank">@thunderbird</a> and <a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener" target="_blank">@tails_live</a> / <a href="https://fosstodon.org/@tails" class="u-url mention" rel="nofollow noopener" target="_blank">@tails</a> / <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tails</a> and many other tools make that easier than ever before.<ul><li>So rather than <a href="https://infosec.exchange/@Andromxda/114232871558517461" rel="nofollow noopener" target="_blank">vomiting insults against my intellect in my mentions</a>, go to the next <a href="https://mastodon.earth/@cryptoparty" class="u-url mention" rel="nofollow noopener" target="_blank">@cryptoparty@mastodon.earth</a> / <a href="https://infosec.space/tags/Cryptoparty" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cryptoparty</a> / <a href="https://chaos.social/@cryptoparty" class="u-url mention" rel="nofollow noopener" target="_blank">@cryptoparty@chaos.social</a> and lend a hand.</li></ul>

Kevin Karhan :verified:<a href="https://mastodon.de/@empathicqubit" class="u-url mention" rel="nofollow noopener" target="_blank">@empathicqubit</a> <a href="https://rubber.social/@crazy_pony" class="u-url mention" rel="nofollow noopener" target="_blank">@crazy_pony</a> <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> <a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener" target="_blank">@delta</a> I disagree, because the few steps needed can be taught to literal <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> within minutes, and I did so several times, walking them through.<ul><li>We as <a href="https://infosec.space/tags/TechLiterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechLiterates</a> are responsible to teach <a href="https://infosec.space/tags/TechLiteracy" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechLiteracy</a> to <a href="https://infosec.space/tags/TechIlliterate" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterate</a> "<a href="https://infosec.space/tags/Normies" class="mention hashtag" rel="nofollow noopener" target="_blank">#Normies</a>", or we deserve then damnation through our own hubris!</li></ul>

Kevin Karhan :verified:<a href="https://mastodon.social/@bkastl" class="u-url mention" rel="nofollow noopener" target="_blank">@bkastl</a> IMHO <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> are the problem!<a href="https://infosec.space/@kkarhan/114222860050759699" translate="no" rel="nofollow noopener" target="_blank">https://infosec.space/@kkarhan/114222860050759699</a>

Kevin Karhan :verified:<a href="https://mastodon.online/@imnotafeline" class="u-url mention" rel="nofollow noopener" target="_blank">@imnotafeline</a> Yeah, similarly weird how <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> can lead <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsec</a> regulators and investigation units...

Kevin Karhan :verified:<a href="https://mstdn.games/@GrayGooGirl" class="u-url mention" rel="nofollow noopener" target="_blank">@GrayGooGirl</a> that's why <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> should not be allowed to do <a href="https://infosec.space/tags/Management" class="mention hashtag" rel="nofollow noopener" target="_blank">#Management</a> for anything they don't know!

Kevin Karhan :verified:<a href="https://ieji.de/@f" class="u-url mention" rel="nofollow noopener" target="_blank">@f</a> <a href="https://m.ai6yr.org/@ai6yr" class="u-url mention" rel="nofollow noopener" target="_blank">@ai6yr</a> <a href="https://infosec.exchange/@briankrebs" class="u-url mention" rel="nofollow noopener" target="_blank">@briankrebs</a> I think it's less of a "<a href="https://infosec.space/tags/political" class="mention hashtag" rel="nofollow noopener" target="_blank">#political</a>" question but an act of <a href="https://infosec.space/tags/SelfDefense" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfDefense</a> and <a href="https://infosec.space/tags/MutualDefense" class="mention hashtag" rel="nofollow noopener" target="_blank">#MutualDefense</a> at this point.<ul><li>So far <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> / <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBrowser</a> set to highest security settings is the most secure option that has proper maintenance & track record and ain't a <a href="https://infosec.space/tags/TUI" class="mention hashtag" rel="nofollow noopener" target="_blank">#TUI</a>-only app like <a href="https://infosec.space/tags/LynxBrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#LynxBrowser</a>. </li></ul>Re: <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> that are unwilling to learn, act like a "<a href="https://infosec.space/tags/BenevolentDictator" class="mention hashtag" rel="nofollow noopener" target="_blank">#BenevolentDictator</a>" and enshure they can't harm themselves in the sense that they don't get <a href="https://infosec.space/tags/sudo" class="mention hashtag" rel="nofollow noopener" target="_blank">#sudo</a> or other administrative privilegues and can't do any <a href="https://infosec.space/tags/persistent" class="mention hashtag" rel="nofollow noopener" target="_blank">#persistent</a> <a href="https://infosec.space/tags/changes" class="mention hashtag" rel="nofollow noopener" target="_blank">#changes</a>. <ul><li>And if that means they get forced to use <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tails</a> then that's a "necessary evil"...</li></ul>After all, societies almost everywhere ban people from driving motor vehicles faster than 6 km/h by people who actively refuse to even take basic exams and classes for a <a href="https://infosec.space/tags/DrivingLicense" class="mention hashtag" rel="nofollow noopener" target="_blank">#DrivingLicense</a>. <ul><li>And I'm convinced one can do more damage as <a href="https://infosec.space/tags/TechIlliterate" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterate</a> with a <a href="https://infosec.space/tags/PC" class="mention hashtag" rel="nofollow noopener" target="_blank">#PC</a> than a single-cylinger two-stroke engine driven motorcycle...</li></ul>

Kevin Karhan :verified:<a href="https://m.ai6yr.org/@ai6yr" class="u-url mention" rel="nofollow noopener" target="_blank">@ai6yr</a> <a href="https://infosec.exchange/@briankrebs" class="u-url mention" rel="nofollow noopener" target="_blank">@briankrebs</a> OFC this targets <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> and the only effective means here are:<ol><li>Teach <a href="https://infosec.space/tags/TechLiteracy" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechLiteracy</a> instead of consumerism.</li><li>Mandate <a href="https://infosec.space/tags/confirmation" class="mention hashtag" rel="nofollow noopener" target="_blank">#confirmation</a> & <a href="https://infosec.space/tags/notification" class="mention hashtag" rel="nofollow noopener" target="_blank">#notification</a> - <a href="https://infosec.space/tags/PopUp" class="mention hashtag" rel="nofollow noopener" target="_blank">#PopUp</a>|s for every use of <a href="https://infosec.space/tags/Clipboard" class="mention hashtag" rel="nofollow noopener" target="_blank">#Clipboard</a> (similar to <a href="https://infosec.space/tags/webcam" class="mention hashtag" rel="nofollow noopener" target="_blank">#webcam</a> use by websites)...</li><li>Ban <a href="https://infosec.space/tags/JavaScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#JavaScript</a> - seriously!</li><li>Ban <a href="https://infosec.space/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a>, because it's a <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Govware</a>, espechally since <a href="https://infosec.space/tags/Windows10" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows10</a> and even more so on <a href="https://infosec.space/tags/Windows11" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows11</a> that is *insecure in every configuration!</li><li>Put <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> before a system they can't feck up. I.e. <a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener" target="_blank">@tails_live</a> <a href="https://fosstodon.org/@tails" class="u-url mention" rel="nofollow noopener" target="_blank">@tails</a> / <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tails</a> for that reason alone (can't run such commands if they neither got <a href="https://infosec.space/tags/root" class="mention hashtag" rel="nofollow noopener" target="_blank">#root</a> nor any <a href="https://infosec.space/tags/persistent" class="mention hashtag" rel="nofollow noopener" target="_blank">#persistent</a> <a href="https://infosec.space/tags/storage" class="mention hashtag" rel="nofollow noopener" target="_blank">#storage</a> to target).</li><li>Normalize the use of <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBrowser</a>!</li><li><a href="https://infosec.space/tags/Teach" class="mention hashtag" rel="nofollow noopener" target="_blank">#Teach</a> <a href="https://infosec.space/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#tech</a> <a href="https://infosec.space/tags/literacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#literacy</a> instead of <a href="https://infosec.space/tags/consumerism" class="mention hashtag" rel="nofollow noopener" target="_blank">#consumerism</a>! </li><li>Ban <a href="https://infosec.space/tags/GAFAMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#GAFAMs</a> and their shitty products!</li><li>Migrate every <a href="https://infosec.space/tags/TechIlliterate" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterate</a> to <a href="https://infosec.space/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> and don't give them administrative privilegues.</li><li>Teach tech literacy instead of consumerism!</li></ol>

Kevin Karhan :verified:<a href="https://chaos.social/@leyrer" class="u-url mention" rel="nofollow noopener" target="_blank">@leyrer</a> +9001%<a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> im <a href="https://infosec.space/tags/Management" class="mention hashtag" rel="nofollow noopener" target="_blank">#Management</a> sind ne absolute Plage und gehören echt verboten!Ich hab' kein Bock mehr auf <a href="https://infosec.space/tags/BuzzwordBingo" class="mention hashtag" rel="nofollow noopener" target="_blank">#BuzzwordBingo</a>!<a href="https://www.youtube.com/watch?v=d5zRe8wa4pM" rel="nofollow noopener" translate="no" target="_blank">https://www.youtube.com/watch?v=d5zRe8wa4pM</a>

Kevin Karhan :verified:<a href="https://56k.dile-up.nl/users/fristi" class="u-url mention" rel="nofollow noopener" target="_blank">@fristi</a> it is only shit when we allow <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> to make decisions...

Kevin Karhan :verified:<a href="https://cyberplace.social/@GossiTheDog" class="u-url mention" rel="nofollow noopener" target="_blank">@GossiTheDog</a> <a href="https://social.vivaldi.net/@ajsadauskas" class="u-url mention" rel="nofollow noopener" target="_blank">@ajsadauskas</a> OFC, we groomed generations of <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> (<a href="https://infosec.space/tags/Users" class="mention hashtag" rel="nofollow noopener" target="_blank">#Users</a> and <a href="https://infosec.space/tags/Admins" class="mention hashtag" rel="nofollow noopener" target="_blank">#Admins</a>) to use that garbage and everyone who didn't lick the boots got yeeted.<ul><li>It's called <a href="https://infosec.space/tags/BrainDrain" class="mention hashtag" rel="nofollow noopener" target="_blank">#BrainDrain</a>!</li></ul>

Kevin Karhan :verified:<a href="https://humanwords.cc/@kinetix" class="u-url mention" rel="nofollow noopener" target="_blank">@kinetix</a> <a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener" target="_blank">@delta</a> <a href="https://mastodon.derg.nz/@anthropy" class="u-url mention" rel="nofollow noopener" target="_blank">@anthropy</a> I am aware of <a href="https://infosec.space/tags/DeltaChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#DeltaChat</a>.<ul><li>As for <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> clients, I can recommend <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener" target="_blank">@gajim</a> / <a href="https://infosec.space/tags/gajim" class="mention hashtag" rel="nofollow noopener" target="_blank">#gajim</a> & <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#monoclesChat</a> hands-down, as both are super-easy to setup and get even abdolute <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> rollin'...</li></ul>

Kevin Karhan :verified:<a href="https://fosstodon.org/@mike" class="u-url mention" rel="nofollow noopener" target="_blank">@mike</a> no, this is intentional, just like any other <a href="https://infosec.space/tags/DarkPattern" class="mention hashtag" rel="nofollow noopener" target="_blank">#DarkPattern</a> use designed to nudge <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> into <a href="https://infosec.space/tags/Office365" class="mention hashtag" rel="nofollow noopener" target="_blank">#Office365</a> and ither <a href="https://infosec.space/tags/subscriptions" class="mention hashtag" rel="nofollow noopener" target="_blank">#subscriptions</a>!

Kevin Karhan :verified:<a href="https://troet.cafe/@pixelschubsi" class="u-url mention" rel="nofollow noopener" target="_blank">@pixelschubsi</a> <a href="https://chaos.social/@erebion" class="u-url mention" rel="nofollow noopener" target="_blank">@erebion</a> <a href="https://mastodon.online/@inaruck" class="u-url mention" rel="nofollow noopener" target="_blank">@inaruck</a> so oder so sind alle aktuellen <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>-Clients, besonders <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#monoclesChat</a> & <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener" target="_blank">@gajim</a> / <a href="https://infosec.space/tags/gajim" class="mention hashtag" rel="nofollow noopener" target="_blank">#gajim</a> warnen ganz eindeutig gegen unverschlüsselte kommunikation!<ul><li>Außerdem kann ich schneller <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> auf <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> onboarden als irgendwer eine anonyme <a href="https://infosec.space/tags/SIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#SIM</a> oder <a href="https://infosec.space/tags/eSIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#eSIM</a> mit <a href="https://infosec.space/tags/Rufnummer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rufnummer</a> besorgen kann.</li></ul>Zumal auch das nen Kostenfaktor ist, wohingegen es drölfzig Optionen gibt was XMPP angeht!

Kevin Karhan :verified:<a href="https://chaos.social/@erebion" class="u-url mention" rel="nofollow noopener" target="_blank">@erebion</a> <a href="https://mastodon.online/@inaruck" class="u-url mention" rel="nofollow noopener" target="_blank">@inaruck</a> doch, hab' ich.Threat Models die ich betreut habe:<ul><li>Person die vor staatlicher Verfolgung fliehen muss</li><li>Person mit Kopfgeld auf deren Ermordung durch Angehörige</li><li>Schutzsuchende in einem gänzlich feindlich gesinntem Staat</li></ul>Ich werde nicht entsprechende personen d0xxen nur um <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> zu überzeugen und ne Diskussion zu gewinnen!Verbindung getrennt

Kevin Karhan :verified:<a href="https://hachyderm.io/@dalias" class="u-url mention" rel="nofollow noopener" target="_blank">@dalias</a> <a href="https://mastodon.laurenweinstein.org/@lauren" class="u-url mention" rel="nofollow noopener" target="_blank">@lauren</a> <a href="https://troet.cafe/@pixelschubsi" class="u-url mention" rel="nofollow noopener" target="_blank">@pixelschubsi</a> Also the <a href="https://hachyderm.io/@dalias/113999748481227961" rel="nofollow noopener" target="_blank">blatant dismissal</a> of absolitely basic <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a> & <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> is just flabberghasting.<ul><li>It's inherently wrong to put all eggs in one basket and <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> being not shut down like <a href="https://infosec.space/tags/SkyECC" class="mention hashtag" rel="nofollow noopener" target="_blank">#SkyECC</a> & <a href="https://infosec.space/tags/EncroChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#EncroChat</a> makes it just as sus as <a href="https://infosec.space/tags/AN%C3%98M" class="mention hashtag" rel="nofollow noopener" target="_blank">#ANØM</a> / <a href="https://infosec.space/tags/OperationIronside" class="mention hashtag" rel="nofollow noopener" target="_blank">#OperationIronside</a> / <a href="https://infosec.space/tags/OperatioTr%C3%B8janShield" class="mention hashtag" rel="nofollow noopener" target="_blank">#OperatioTrøjanShield</a> and <a href="https://infosec.space/tags/CryptoAG" class="mention hashtag" rel="nofollow noopener" target="_blank">#CryptoAG</a> / <a href="https://infosec.space/tags/MINERVA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MINERVA</a> / <a href="https://infosec.space/tags/RUBIKON" class="mention hashtag" rel="nofollow noopener" target="_blank">#RUBIKON</a>.</li></ul>Only <a href="https://infosec.space/tags/decentralized" class="mention hashtag" rel="nofollow noopener" target="_blank">#decentralized</a>, <a href="https://infosec.space/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a> & <a href="https://infosec.space/tags/OpenStandards" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenStandards</a> can actuall survive long-term and remain <a href="https://infosec.space/tags/secure" class="mention hashtag" rel="nofollow noopener" target="_blank">#secure</a>.<ul><li>Otherwise we'd all gaslight ourselves into ignoring the hard lessions we learned that bought us to the <a href="https://infosec.space/tags/Fediverse" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fediverse</a> and why we ain't on <a href="https://infosec.space/tags/Shitter" class="mention hashtag" rel="nofollow noopener" target="_blank">#Shitter</a> or <a href="https://infosec.space/tags/tumblr" class="mention hashtag" rel="nofollow noopener" target="_blank">#tumblr</a> or <a href="https://infosec.space/tags/BrownSky" class="mention hashtag" rel="nofollow noopener" target="_blank">#BrownSky</a> or <a href="https://infosec.space/tags/NSAbook" class="mention hashtag" rel="nofollow noopener" target="_blank">#NSAbook</a> (any more)!</li></ul>It's the same reasons we use <a href="https://infosec.space/tags/PGPG" class="mention hashtag" rel="nofollow noopener" target="_blank">#PGPG</a>/MIME & <a href="https://infosec.space/tags/SSH" class="mention hashtag" rel="nofollow noopener" target="_blank">#SSH</a> and not <a href="https://infosec.space/tags/X400" class="mention hashtag" rel="nofollow noopener" target="_blank">#X400</a> & <a href="https://infosec.space/tags/X25" class="mention hashtag" rel="nofollow noopener" target="_blank">#X25</a>!<ul><li>Unlike with <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> one doesn't has to trust the provider or app. <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> works regardless if you use <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> or <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener" target="_blank">@gajim</a> or do <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> and only trust code you wrote yourself...</li></ul>IOW: Think "How can you weaponize Signal?" and see what you csn do just holding key people in contempt...<ul><li>And I'm not even talkibg about <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Govware</a> - <a href="https://infosec.space/tags/Backdoors" class="mention hashtag" rel="nofollow noopener" target="_blank">#Backdoors</a> and <a href="https://infosec.space/tags/MassSurveillance" class="mention hashtag" rel="nofollow noopener" target="_blank">#MassSurveillance</a> alike <a href="https://infosec.space/tags/Room651A" class="mention hashtag" rel="nofollow noopener" target="_blank">#Room651A</a>, but just duely submitted warrants that <a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener" target="_blank">@Mer__edith</a> will comply with... </li></ul>The less <a href="https://infosec.space/tags/info" class="mention hashtag" rel="nofollow noopener" target="_blank">#info</a> a provider has, the less they can be forced to snitch upon customers.<ul><li>So even if you don't give a shit that <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudAct</a> makes this a "<a href="https://infosec.space/tags/CantUse" class="mention hashtag" rel="nofollow noopener" target="_blank">#CantUse</a> & <a href="https://infosec.space/tags/WintUse" class="mention hashtag" rel="nofollow noopener" target="_blank">#WintUse</a>" (out of US-centrist privilegue to not comply <a href="https://infosec.space/tags/GDPR" class="mention hashtag" rel="nofollow noopener" target="_blank">#GDPR</a> & <a href="https://infosec.space/tags/BDSG" class="mention hashtag" rel="nofollow noopener" target="_blank">#BDSG</a>) for many, it's still dishonest.</li></ul>"<a href="https://infosec.space/tags/JustUseSgnal" class="mention hashtag" rel="nofollow noopener" target="_blank">#JustUseSgnal</a>!" is a form of dangerous "<a href="https://infosec.space/tags/TechPopulism" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechPopulism</a>" aimed at bamboozling <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> who don't know better, abusing information asymetry to pull rank instead of investing the time and effort to *explain "how" and "why" this is indeed a good or bad idea.<ul><li>There's a reason why <a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener" target="_blank">@tails_live</a> / <a href="https://fosstodon.org/@tails" class="u-url mention" rel="nofollow noopener" target="_blank">@tails</a> / <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tails</a> doesn't include <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> and why I'll say it again that XMPP+OMEMO over <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> / <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tor</a> is the gold standard in terms of <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> and <a href="https://infosec.space/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> when it comes to <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> that isn't <a href="https://infosec.space/tags/airgapped" class="mention hashtag" rel="nofollow noopener" target="_blank">#airgapped</a> aka. <a href="https://www.youtube.com/watch?v=vdab4T_CoN8" rel="nofollow noopener" target="_blank">"Airgapped PGP"</a>.</li></ul>The only ones that have a chance to beat that are <a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener" target="_blank">@delta</a> / <a href="https://infosec.space/tags/deltaChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#deltaChat</a> but that's just <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PGP</a>/MIME <a href="https://infosec.space/tags/eMail" class="mention hashtag" rel="nofollow noopener" target="_blank">#eMail</a> in a nice UI...<ul><li>You may now laugh at me and think my "<a href="https://infosec.space/tags/TinfoilHat" class="mention hashtag" rel="nofollow noopener" target="_blank">#TinfoilHat</a> sits too tight" but I'm shure sooner or later I'll be evidenced as correct...</li></ul>

Kevin Karhan :verified:<a href="https://mastodon.laurenweinstein.org/@lauren" class="u-url mention" rel="nofollow noopener" target="_blank">@lauren</a> I disagree as <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> requires a <a href="https://infosec.space/tags/PhoneNumber" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumber</a> = <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> & cost barrier and they restrict access based off <a href="https://infosec.space/tags/PhoneNumbers" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumbers</a>.<ul><li>Plus it's illegal in an increasing number if juristictions to gmeven attempt to acquire a phone number or SIM anonymously.</li></ul>Whereas it's so easy and fast to get <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> setup with <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> (which uninke <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> doesn't demand PII!) that I'd challenge you to a <a href="https://infosec.space/tags/speedrun" class="mention hashtag" rel="nofollow noopener" target="_blank">#speedrun</a> with step-by-step documentation for every <a href="https://infosec.space/tags/TechIlliterate" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterate</a> to follow along to setup Signal from scratch vs. me doing <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> on <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener" target="_blank">@gajim</a>.<ul><li>Cuz I did that on <a href="https://mastodon.earth/@cryptoparty" class="u-url mention" rel="nofollow noopener" target="_blank">@cryptoparty</a> / <a href="https://infosec.space/tags/CryptoParty" class="mention hashtag" rel="nofollow noopener" target="_blank">#CryptoParty</a> / <a href="https://infosec.space/tags/CryptoParties" class="mention hashtag" rel="nofollow noopener" target="_blank">#CryptoParties</a> quite often.</li></ul>Also <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> being <a href="https://infosec.space/tags/centralized" class="mention hashtag" rel="nofollow noopener" target="_blank">#centralized</a> makes it as vulnerable as any other <a href="https://infosec.space/tags/SingleVendor" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleVendor</a> & <a href="https://infosec.space/tags/SingleProvider" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleProvider</a> solution!<ul><li>Whereas even if <a href="https://infosec.space/tags/monocles" class="mention hashtag" rel="nofollow noopener" target="_blank">#monocles</a> were to shutdown, one could easily switch over to any other provider or <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a>.</li></ul>I'd not count on the <a href="https://infosec.space/tags/Trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#Trump</a>-Regime not flexing <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudAct</a> against anyone they deem undesireable!

Kevin Karhan :verified:<a href="https://chaos.social/@kubikpixel" class="u-url mention" rel="nofollow noopener" target="_blank">@kubikpixel</a> <a href="https://infosec.exchange/@malwaretech" class="u-url mention" rel="nofollow noopener" target="_blank">@malwaretech</a> <a href="https://mastodon.social/@tomscott" class="u-url mention" rel="nofollow noopener" target="_blank">@tomscott</a> nodds in agreement<ul><li>It's like the whole <a href="https://infosec.space/tags/DigitalSnakeoil" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitalSnakeoil</a> bs. with "<a href="https://infosec.space/tags/Antivirus" class="mention hashtag" rel="nofollow noopener" target="_blank">#Antivirus</a>" which IMHO should be the sole responsibility of the <a href="https://infosec.space/tags/OS" class="mention hashtag" rel="nofollow noopener" target="_blank">#OS</a> / <a href="https://infosec.space/tags/Distro" class="mention hashtag" rel="nofollow noopener" target="_blank">#Distro</a> maintainer to get done correctly.</li></ul>If people don't trust a <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Govware</a> like <a href="https://infosec.space/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> to get that done correctly, then they should not trust 3rd party vendors that have neither sourcecode access nor ability to get someone with sourcecode access to validate and test their work!<ul><li>The whole <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsec</a> "cottage industry" aimed at <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> is just disingenous and dishonest, because they dismiss proper <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> & <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> as vital parts.</li></ul>Mind you this isn't the basic *"on mailservers/upload servers/... run signature checks for known malware and <code>chmod -x</code> on all attachmebts.<ul><li>It's a systemic issue discarding basic information.</li></ul>

Kevin Karhan :verified:<a href="https://swiss.social/@silvan" class="u-url mention" rel="nofollow noopener" target="_blank">@silvan</a> <a href="https://mastodon.social/@nakal" class="u-url mention" rel="nofollow noopener" target="_blank">@nakal</a> <a href="https://social.tchncs.de/@kuketzblog" class="u-url mention" rel="nofollow noopener" target="_blank">@kuketzblog</a> jain.<ul><li>"<a href="https://infosec.space/tags/Gratismentalit%C3%A4t" class="mention hashtag" rel="nofollow noopener" target="_blank">#Gratismentalität</a>" von "<a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a>" <a href="https://social.tchncs.de/@kuketzblog/113938815702379959" rel="nofollow noopener" target="_blank">ist durchaus ein massives Problem</a> denn damit wurde <a href="https://infosec.space/tags/Datenhehlerei" class="mention hashtag" rel="nofollow noopener" target="_blank">#Datenhehlerei</a> der <a href="https://infosec.space/tags/GAFAMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#GAFAMs</a> zum <a href="https://infosec.space/tags/Gesch%C3%A4ftsmodell" class="mention hashtag" rel="nofollow noopener" target="_blank">#Geschäftsmodell</a>!</li></ul><a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> & <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PGP</a>/MIME sind allein wegen <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfCustody</a> und <a href="https://infosec.space/tags/Offenheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Offenheit</a> inkl. <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a>-Möglichkeit zu bevorzugen!<ul><li>Alle <a href="https://infosec.space/tags/Messenger" class="mention hashtag" rel="nofollow noopener" target="_blank">#Messenger</a> die <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> wie <a href="https://infosec.space/tags/Rufnummern" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rufnummern</a> verlangen sind allein deshalb IMHO durchgefallen!</li></ul>

Kevin Karhan :verified:<a href="https://possum.city/@tauon" class="u-url mention" rel="nofollow noopener" target="_blank">@tauon</a> Also what goid is an encryption like <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> is you don't have <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfCustody</a> of all the keys?<ul><li>Shure you could disable encryption but <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> shows you when it's active and when not and comes with sensible defaults like having <a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> active per default...</li></ul>I can setup over a dozen <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> 1:1 with <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a> accounts and <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#monoclesChat</a> & <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener" target="_blank">@gajim</a> / <a href="https://infosec.space/tags/gajim" class="mention hashtag" rel="nofollow noopener" target="_blank">#gajim</a> in the time it takes me to get a <a href="https://infosec.space/tags/nonKYC" class="mention hashtag" rel="nofollow noopener" target="_blank">#nonKYC</a> <a href="https://infosec.space/tags/eSIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#eSIM</a> from overseas with a phone number as mandated by <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> and maintaining that number for <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> will easily cost like $2,50 p.m. at minimum.<ul><li>Whereas a Data-only eSIM is way faster and cheaper to get and maintain.</li></ul>In fact even legitimately acquiring and registering a <a href="https://infosec.space/tags/Prepaid" class="mention hashtag" rel="nofollow noopener" target="_blank">#Prepaid</a> <a href="https://infosec.space/tags/SIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#SIM</a> in-store in <a href="https://infosec.space/tags/Germany" class="mention hashtag" rel="nofollow noopener" target="_blank">#Germany</a> takes longer than setting up <a href="https://infosec.space/tags/Fdroid" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fdroid</a> & monocles chat & a XMPP account whilst on throttled <a href="https://infosec.space/tags/EDGEland" class="mention hashtag" rel="nofollow noopener" target="_blank">#EDGEland</a> speeds...<ul><li>Plus unlike Signal, I can just push <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a> through <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> / <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tor</a> and/or any <a href="https://infosec.space/tags/VPN" class="mention hashtag" rel="nofollow noopener" target="_blank">#VPN</a> & <a href="https://infosec.space/tags/Proxy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proxy</a>... </li></ul><a href="https://possum.city/notes/a3rt4nzbn11z01vi" rel="nofollow noopener" translate="no" target="_blank">https://possum.city/notes/a3rt4nzbn11z01vi</a>

Recent searches

Search options

Administered by:

Server stats:

#TechIlliterates