techhub.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A hub primarily for passionate technologists, but everyone is welcome

Administered by:

Server stats:

5.3K
active users

#nobus

0 posts0 participants0 posts today
Replied in thread

@sylv_a personally, I'd recommend #XMPP+#OMEMO (and #PGP/MIME - encrypted #eMail) for real #E2EE with #SelfCustody of Keys as well as actual #decentralization.

Cuz I noone's gonna risk jailtime for (non-paying!) users - it at all…

In fact I'd call U.S. MIL/INTEL as "criminally incompetent" if they didn't manage to plant multiple people inside @signalapp / #Signal or any other single-vendor / single-provider messenger.

Personally, solutions like Signal & #Threema have a stench like #CryptoAG / #MINERVA / #Rubikon and #ANØM / #OperationIronside / #OperationTrøjanShield.

By contrast: #OpenStandards like XMPP+OMEMO & PGP/MIME are independently verifyable and not dependent on on a single individual/organization for maintenance/survival/implementation/development.

Personally I'd still recommend @monocles / #monocles with #monoclesChat & #gajim...

Twitterthaddeus e. grugq on Twitter“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”
Replied in thread

@max
To quote you directly:

"[...] easy to use solutions that are at the same time private and secure. [...]"

It is easier, faster, cheaper and overall simpler to get someone setup with #XMPP + #OMEMO espechally if they don't have a #PhoneNumber and/or #ID to acquire a #SIM.

And if you go and say, "Just buy a [insert country here] [e]SIM!" and expect #TechIlliterates without a #CreditCard, #PayPal or other means of #OnlinePayment to fiddle around with some #eSIM if not having to get some #eSIMcard because they can only afford to maintain one SIM and can't spend triple-digits on a new devices then you completely missed the point!

It's not that I expect anyone to get #TechLiterate within minutes, but similar to setting up a cordless DECT phone it's something one has to do once in 5 years and just have them put the password in a safe spot to retain...

Point is that #Signal #WontFix their setup and that was evidently clear even before @Mer__edith succeeded #MoxieMarlinspike: Their entire operation has a distinct #CryptoAG stench as it's an #unsustainable #VCmoneyBurning party!

A counterexample on how this could've been done are #Tor, #eMail and other truly #OpenSource as in #MultiVendor & #MultiProvider standards.

Whereas it's trivial to get people setup on one of many XMPP servers I've personally tested!

AFAIK Signal doesn't even have an #OnionService / .onion for their Website, much less any #API enpoints to use it with!

You're free to also provide evidence and supporting data to your arguments, rather then neighsaying against proven to be more secure and reliable [by virtue of decentralization] options like XMPP+OMEMO and/or #PGP/MIME.

The proper fix is to actually assess the situation and acknowledge the risks and limitations as well as the very nature of communications, which means upgrading later is exponentially more painful, thus getting people properly setup once is way easier.

  • Just because WE [ or rather @rysiek in this case ] rather privilegued enough to not be hatecrimed in their current location doesn't mean this is the case for everyone. And having places like Signal rely on a "#CDN" is just another red flag to me because questions like this one just don't arise with monocles.chat as people can just exercise proper #SelfCustody and just use Tor!

Speaking of #monocles: That business is at least #sustainable because it's funded by users (€2 p.m.) which they can pay anonymously

gruene.socialMax L. (@max@gruene.social)@kkarhan@infosec.space Sorry but no, the correct solution is to push for easy to use solutions that are at the same time private and secure. Hiding privacy and security behind a veil of "you need to know" is discrimination of people that are not able (either mentally, physically or monetary) to gain that knowledge. The correct move here is for @signalapp@mastodon.world and any other service to fix this and for legislators to enact laws enforcing proper security and privacy by design.
Replied in thread

@eloquence precisely that is my problem with bs like the #TikTokBan...

  • It's merely signalling that everything is fine unless it touches #NOBUS Doctrine and threatens the "#GlobalReach" of #NSAbook and it's access via #PRISM-Collaborators.

The fact that #DataBrokers basically act as privatized #intelligence agencies IS LITERALLY THE PROBLEM!

I'd not be surprised if #Trump were to basically create a "DATA-#FATCA" and demand #hosters and #providers outside the #USA to #backdoor their systems and provide #BulkAccess to #US citizens' data to US intelligence unless they want to face sanctions which would basically force them off the Internet due to it's US-centric nature!

Sowas wie "unsere Schwachstellen" wird's halt nie geben, daher entweder ist ein System für alle oder niemanden sicher. #NOBUS

"Russische Hacker verwendeten Schwachstellen, wie sie sonst nur von Spyware von Regierungen, dem berühmten "Bundestrojaner" ausgenutzt werden."

derstandard.at/story/300000023

DER STANDARD · Die Tricks des "Bundestrojaners" sind in die Hände Moskaus gefallenHacker im Dienste Moskaus nutzen Exploits, die nur von kommerziellen Spyware-Anbietern wie der NSO Group oder Intellexa stammen können
Replied in thread

@ralph naja...

Was #Scraping angeht ist die Sache anders als mit Binärdaten (siehe Apple v. Franklin)...

Deshalb verbietet die "V.R." #Xhina.auch #Tesla-Fahrzeuge...

Felix RedaGitHub Copilot is not infringing your copyright

What do you think: Has the fact that the #xzbackdoor has been exposed disrupted the market for security vulnerabilities or will it remain unimpressed?

Imagine if you were a provider and now wanted to offer your code to some service, authority or state so that your #NOBUS solution could never be discovered by others... 😉

Was meint ihr: Die Tatsache, dass die #xzbackdoor aufgeflogen ist, hat das den Markt von Sicherheitslücken gestört oder bleibt dieser weiter unbeeindruckt?

Stellt euch mal vor, ihr wärt ein Anbieter und wollt nun euren Code irgendeinem Dienst, einer Behörde oder Staat anbieten, dass eure #NOBUS-Lösung nie von anderen entdeckt werden kann... 😉

#ssh #xz #git
Genial am Hack ist die Ruhe und Gelassenheit bei der Vorbereitung von 2021 bis 2024

Genial ist der Plan einer Supply Chain Attack

Genial ist das Verstecken des Schadcodes in 2 Testfiles, die a) harmlos aussehen und die b) im "unsichtbaren" #GitIgnore versteckt waren

Genial ist, eine so sichere Software wie #ssh indirekt anzugreifen (vgl Supply Chain Attack), die weltweit von fast allen Servern genutzt wird

Genial ist, dass die #Backdoor quasi ebenso sicher ist durch #NOBUS