Replied in thread
@erebion @pixelschubsi @inaruck Ja, weil das Teil soviele #Govware - #Backdoors hat dass es als unsicher gelten muss!
- Sonst wär's gem. #ITAR illegal...
Recent searches
Search options
#ITAR
0 posts0 participants0 posts today
@erebion @inaruck es gibt soviele Gründe weshalb Mensch nicht @signalapp vertrauen sollte.
Aber um es nochnal klar zu erklären:
#Signal verlangt #Telefonnummer = #PII (Persönlich identifizierbare Informationen). [Und nein, sich irgendwo zwielichtig ne Nummer als Ausrede greift nicht!]
Signal ist zentralisiert & #SingleVendor sowie #SingleProvider!
Signal fällt wegen Sitz in den #USA unter #CloudAct = inhärent mit #DSGVO & #BDSG inkompatibel!
Signal erlaubt keine #SelfCustody aller Keys und ist deshalb für Einige Angriffsmethoden offen!
Nur echte #Dezentralisierung wie bei #XMPP+#OMEMO kann #Datenschutz, #Informationssicherheit und #Vertraulichkeit sicherstellen.
- Anders als Signal kann @monocles nicht gegen Nutzer basierend auf Herkunft (#Rufnummer!) diskriminieren und anders als Signal funktioniert XMPP+OMEMO problemlos über @torproject / #Tor und kann als #OnionService #SelfHosted werden, für maximale #Privatsphäre und #Datenhoheit!
Die strukturellen Probleme von Signal machen es angesichts einer #gleichgeschaltet|en #USA ein absolut unnötiges #Risiko, denn ich garantiere @Mer__edith wird für keine*n User*in lebenslange #Beugehaft riskieren!
- Genauso wie's keine "#LoglessVPN|s" gibt!
Und #Signal ist sehr wohl in der Lage #Govware - #Backdoors zu integrieren, denn sonst wären die wegen #ITAR bereits geknastet worden, weil diese #Nutzer*innen aus #Kuba, #Nordkorea und #Russland haben!
Replied in thread
@lucasmz @Avitus @david_chisnall the benefit of #XMPP+#OMEMO is that there are several providers, including free options...
All #PII incl. #PhoneNumbers can and will be abused by existing governments and if users don't pay, then they are the product and their data is the one to be sold.
- #KYC IS THE #IllicitActivity WHEN IT COMES TO #ComSec!
After all, you have the same cost problem with phone numbers. Even if one doesn't pay per line/number and never pay for calls and texts, they still have to top it up to extent validity.
- And again: It's way easier for a government to demand an ID for a #SIM that works in networks around their country (i.e. #Turkey demands registration on a per-#IMEI - basis *with #ID) than to tunnel XMPP+OMEMO through @torproject over #EDGEland-speed #2G networks.
Plus you relying an unfixably insecure #Telephony makes a system inherently unsafer than it needs to be...
- This is how people get caught!
Also #Signal is able and willing to use said PII to restrict and ban users and if I were some dissident in Cuba or North Korea or even just Eritrea or Yemen I'd not rely on non-enforcement of #OFAC / #USML / #ITAR since Signal can obviously distinguish & identify accounts by virgue if their #PhoneNumber!
- Always think "How can this be weaponized against someone?" when it comes to #privacy!
GitHublists.d/xmpp.servers.list.tsv at main · greyhat-academy/lists.dList of useful things. Contribute to greyhat-academy/lists.d development by creating an account on GitHub.
Replied in thread
@anelki cuz if #Signal and/or #WhatsApp actually had good encryption, they'd be shutdown due to #NonCompliance with #CloudAct and their staff would be jailed for #ITAR violations...
- Then again even if WhatsApp technically does #E2EE that doesn't mean it has to be good or secure.
If I use RSA-128 to generate the keys for AES-256 then it's technically E2EE but even the worst-equipped police force can read the comms basically in realtime!
@mysk that's because #Apple has introduced varios #Govware - #Backdoors in their products.
Otherwise it would be illegal to own, import, sell or use #iPhone|s and other Devices in the "P.R." #China, #Russia, #SaudiArabia / #KSA & #India and it would be illegal to #export #macOS & #iOS as per #ITAR!
Also #iCloud is evidently #backdoored on purpose: Otherwise they would.not have been able to serve their chinese users on a silver platter to Beijing!