@sylv_a personally, I'd recommend #XMPP+#OMEMO (and #PGP/MIME - encrypted #eMail) for real #E2EE with #SelfCustody of Keys as well as actual #decentralization.
Cuz I noone's gonna risk jailtime for (non-paying!) users - it at all…
In fact I'd call U.S. MIL/INTEL as "criminally incompetent" if they didn't manage to plant multiple people inside @signalapp / #Signal or any other single-vendor / single-provider messenger.
Personally, solutions like Signal & #Threema have a stench like #CryptoAG / #MINERVA / #Rubikon and #ANØM / #OperationIronside / #OperationTrøjanShield.
By contrast: #OpenStandards like XMPP+OMEMO & PGP/MIME are independently verifyable and not dependent on on a single individual/organization for maintenance/survival/implementation/development.
Personally I'd still recommend @monocles / #monocles with #monoclesChat & #gajim...
"[...] easy to use solutions that are at the same time private and secure. [...]"
It is easier, faster, cheaper and overall simpler to get someone setup with #XMPP + #OMEMO espechally if they don't have a #PhoneNumber and/or #ID to acquire a #SIM.
And if you go and say, "Just buy a [insert country here] [e]SIM!" and expect #TechIlliterates without a #CreditCard, #PayPal or other means of #OnlinePayment to fiddle around with some #eSIM if not having to get some #eSIMcard because they can only afford to maintain one SIM and can't spend triple-digits on a new devices then you completely missed the point!
It's not that I expect anyone to get #TechLiterate within minutes, but similar to setting up a cordless DECT phone it's something one has to do once in 5 years and just have them put the password in a safe spot to retain...
Point is that #Signal #WontFix their setup and that was evidently clear even before @Mer__edith succeeded #MoxieMarlinspike: Their entire operation has a distinct #CryptoAG stench as it's an #unsustainable #VCmoneyBurning party!
A counterexample on how this could've been done are #Tor, #eMail and other truly #OpenSource as in #MultiVendor & #MultiProvider standards.
NOTHING compells Signal to demand PII, run a #Shitcoin #Scam aka. #MobileCoin that even seasoned #TechLiterates and #CryptoBros can't setup properly, and in fact Signal using phone numbers makes it trivial to discriminate against users and easier for them to identify them!
If my reasoning didn't resonate with you, then try helping i.e. undocumented migrants aka. "#SansPapier|s" to get setup with it without violating laws and/or ToS and/or needing an imported SIM which I'm shure most folks don't have on hand!
Whereas it's trivial to get people setup on one of many XMPP servers I've personally tested!
AFAIK Signal doesn't even have an #OnionService / .onion
for their Website, much less any #API enpoints to use it with!
You're free to also provide evidence and supporting data to your arguments, rather then neighsaying against proven to be more secure and reliable [by virtue of decentralization] options like XMPP+OMEMO and/or #PGP/MIME.
The proper fix is to actually assess the situation and acknowledge the risks and limitations as well as the very nature of communications, which means upgrading later is exponentially more painful, thus getting people properly setup once is way easier.
Speaking of #monocles: That business is at least #sustainable because it's funded by users (€2 p.m.) which they can pay anonymously
@frumble ich finde das Format an sicht shice...
@eloquence precisely that is my problem with bs like the #TikTokBan...
The fact that #DataBrokers basically act as privatized #intelligence agencies IS LITERALLY THE PROBLEM!
I'd not be surprised if #Trump were to basically create a "DATA-#FATCA" and demand #hosters and #providers outside the #USA to #backdoor their systems and provide #BulkAccess to #US citizens' data to US intelligence unless they want to face sanctions which would basically force them off the Internet due to it's US-centric nature!
@kubikpixel ja, weil #NOBUS-Doktrin setzt auf #CloudAct und #DigitaleHegemonie!
Sowas wie "unsere Schwachstellen" wird's halt nie geben, daher entweder ist ein System für alle oder niemanden sicher. #NOBUS
"Russische Hacker verwendeten Schwachstellen, wie sie sonst nur von Spyware von Regierungen, dem berühmten "Bundestrojaner" ausgenutzt werden."
@byteborg @HonkHase ganz einfach: #GAFAMs fallen nur unter #CloudAct und der #Cyberfaschismus der #USA verlangt zwar #Datensammelwut verbietet aber wegen #NOBUS-Doktrin die Weitergabe.
@ralph naja...
Was #Scraping angeht ist die Sache anders als mit Binärdaten (siehe Apple v. Franklin)...
Deshalb verbietet die "V.R." #Xhina.auch #Tesla-Fahrzeuge...
@tomtrottel @guenterhack eher #CloudAct, weil #Palantir stört die #US-#Hegemonie qua #NOBUS-Doktrin...
@kkeller @jonahstein @lauren it's literally about the #US #hegemony being threatened.
They don't care about "#FreezePeach" or whatever but to solely protect both the #GAFAMs and the #NSA [see #NOBUS doctrine ]...
Everything else are just smoke grenades...
@netzpolitik_feed Das allein sollte grund genug sein die #USA nicht als "#SicheresDrittland" weder für #Menschen noch #Daten zu betrachten...
What do you think: Has the fact that the #xzbackdoor has been exposed disrupted the market for security vulnerabilities or will it remain unimpressed?
Imagine if you were a provider and now wanted to offer your code to some service, authority or state so that your #NOBUS solution could never be discovered by others...
Was meint ihr: Die Tatsache, dass die #xzbackdoor aufgeflogen ist, hat das den Markt von Sicherheitslücken gestört oder bleibt dieser weiter unbeeindruckt?
Stellt euch mal vor, ihr wärt ein Anbieter und wollt nun euren Code irgendeinem Dienst, einer Behörde oder Staat anbieten, dass eure #NOBUS-Lösung nie von anderen entdeckt werden kann...
#ssh #xz #git
Genial am Hack ist die Ruhe und Gelassenheit bei der Vorbereitung von 2021 bis 2024
Genial ist der Plan einer Supply Chain Attack
Genial ist das Verstecken des Schadcodes in 2 Testfiles, die a) harmlos aussehen und die b) im "unsichtbaren" #GitIgnore versteckt waren
Genial ist, eine so sichere Software wie #ssh indirekt anzugreifen (vgl Supply Chain Attack), die weltweit von fast allen Servern genutzt wird
Genial ist, dass die #Backdoor quasi ebenso sicher ist durch #NOBUS
@rose @evdas @cyronimose The #NSAbook / #StasiBook issue won't be addressed because it's mere existance is politically desired for #cyberfacist hegemony of the #NOBUS doctrine...
#Facebook's existance is a #Honeypot done to trick people to #snitch on their mutuals!
@Bitchableiter #NOBUS als Doktrin ist auch nichts anderes als #Cyberfaschismus und gobales Hegemonialstreben...
Da #IT in #JAPAN allerdings zu fast 100% aus #Windows besteht ist es kein Wunder, wenn jene #Govware auch von anderen geknackt wird...
@Nika2022 @kenji not to mention pushing for the #Hegemony in #Cyberspace aka. #NOBUS by literally restrictiong #Encryption.
#ITAR & #WassenaarArrangement are literal Crimes against Humanity!
@Elizafox I'd sus the numbers on both.
Espechally on #Facebook since that'll include a shitload ob abandoned and/or corporate accounts...
The thread of the is that it may persist and outlive
just like it already outlived #tumblr,
and how #XMPP & #IRC outlived #AIM,
and will outlive
...
Furthermore they are #PRISM members to this day and thus get financial incentives to sabotage competitors threatening #NOBUS #hegemony...