@artfulmodder last time I checked @signalapp still demanded #PII in.the form of a #PhoneNumber, still peddled the #MobileCoin #Shitcoin #Scam and didn't move out of the #Cyberfacist #USA despite #CloudAct being nothing new!

• Not to mention #Signal is both able and willing to discriminate against users based off said PII. Just because they do it for "#Sanctions #Compliance" diesn't mean they ain't gonna change that nor that @Mer__edith (or anyone else at Signal) could be bribed or threatened to do so.

They are #centralized #SingleVendor & #SingleProvider and are thus a #SinglePointOfFailure per design!

• Unlike @delta (which is #PGP/MIME in a different UI) or #XMPP+#OMEMO (which you can use via @torproject / #Tor and connect to a Server that is an #OnionService.

IMHO "memory tagging" is the least of Signal's problems. To me they stench "#ControlledOpposition" just as hard as #ANØM and incompetence as hard as #EncroChat!

@action_jay everything that isn't a fully #OpenSource'd #OpenStandard with #MultiVendor & #MultiProvider support.

That's why @delta (#PGP/MIME) & @monocles / @gajim (#XMPP+#OMEMO) are superior to @signalapp , because that can be easily cracked down on due to #CloudAct, whereas truly #decentralized systems have #SelfCustody so they can't be taken down effectively.

• Bonus points if they support @torproject / #Tor, cuz that makes it harder for "state-sponsored" (or rather state-endorsed/governmental attackers) to block or sabotage it (#OnionServices are harder to take down!)

@aral

Why not just switch to #Tor #OnionServices ?

* No Geolocation.
* Free VPN for server and clients.
* Free TLS.
* Unconfiscatable.
* Etc....

@wetell Ihr könntet wie @guardianproject nen #Fdroid-Repo launchen.

Dann kriegen Leute auch automatisch #Updates angeboten.

• Besser noch: Ihr macht einfach ne #accessible [ohne #JavaScript, schon garnicht von Drittanbietern aus dem Nicht-#EU - Ausland!) #Webseite die problemlos via #LynxBrowser über #Iridium / #Tor funktioniert (unter bspw. mein.wetell.de) und die paar Optionen die eure Kunden je bräuchten (Tarifwechsel, Kundendaten ändern, Kündigen, Wechselservice, ...) dort einfach angeboten werden.

Schließlich wird eure #App wahrscheinlich wie alle anderen auch nur nen glorifizierer WebView sein welcher ne nicht-öffentliche Website aufruft und den Rest per #API umsetzt.

@cryptgoat Es ist aber nachweislich einfacher und schneller, z.B. @monocles / #monoclesChat anonym einzurichten, als sich über umwege ne anonyme #SIM-Karte zu beschaffen.

• Gerade weil letztere seit 07/2017 kriminalisiert wurden!

#Matrix ist shice, aber #XMPP+#OMEMO funktionert sehr gut.

• @signalapp ist bestenfalls nen #Honeypot, denn die werden Nutzer snitchen wenn die Alternative lautet dass @Mer__edith lebenslange #Beugehaft wegen Verstoß gegen #CloudAct bekommt...

Genauso wie #VPN|s nachweislich shice sind und @torproject / #Tor ungeschlagen ist!

@BrodieOnLinux I am pretty shure @torproject / #TorBrowser and any #App that does #Proxy through @guardianproject / #Orbot for #Tor access is not affected but I do encourage both #Tor and Orbot devs to test against #LocalhostTracking!

@delta also #deltaChat natively supports #Proxies, #VPN|s and @torproject / #Tor so not only can people use it that way but also use any other bypass method.

• Obviously, the classic #Sneakernet with people doing uucp with foreign mobile networks near borders works just as well...

I'd not be surprised if delta Chat is also used by #RimjinGang* and #38North** for a "contactless sneakernet" tho I am convinced they won't confirm or deny that for #OpSec, #InfoSec & #ComSec reasons alone...

• I mean, both #Iran and #NorthKorea ain't #Iraq and #Syria where one could just take a phat satellite dish, strap an LTE stick or even external antennas on and just point it at turkish or lebanese radio towers near the border, as owning any satellite equipment in these places is a guarantee to get publicly executed for "espionage"...

@KarlHeinzHasliP @cryptgoat @dalai @martinsteiger vorallem geht #IRC auch prima via #Tor...

@Cappyjax IDGAF about "passion". All I care about is the security of users!

Requiring any #PII like a #PhoneNumber is inacceptable when it comes to #ComSec, #InfoSec & #OpSec, espechally given @signalapp is not only able but entirely willing to restrict service based off said numbers, making their "solution" insecure by design.

• There's a reason why #XMPP+#OMEMO and #PGP/MIME [both each over @torproject / #Tor] is the evidently superior and more secure approach, as being unable to "#KYC" a user is a matter of security...

Espechally since obtaining a phone number anonymously is oftentimes illegal (i.e. #Germany made it illegal starting 07/2017, so using any service that demands a phone numner is out of question)

• And even if one can get an anonymous #SIM (with a phone number) or god forbid #eSIM, (which is at best pseudonymous as tracking down users by virtue of matching ICCID, IMEI & IMSI to location and time) the chances are high that one ends up with recycled phone numbers that have already been used.

Obviously the devs of #Signal and @Mer__edith are well aware of this critical flaw, which is why I consider them to act as "useful idiots" or rather "controlled opposition" as #Signal could've been shutdown trivially by the #US Government or forced into banning users based off their #PhoneNumbers (they may call this "#sanctions #compliance" given they added a #Shitcoin - Wallet into Signal!)...

• All the "but #Metadata" #FUD turns into #MarketingLies once put under the looking glass and examined against the risk of state-sponsored / -endordsed / -supported attackers.

Whereas with @monocles / #monoclesChat, @gajim / #gajim and @delta / #deltaChat and @thunderbird / #Thunderbird respectably I can not only use Tor, but do #SelfHosting for the entire #communications infrastructure (i.e. using an #OnionService = only reachable via Tor) and get the advantages of a self-routing, self-authenticating & battle-hardened against censorship proxy network that can't be shutdown!

• And if you think this is too tinfoilhatted, then consider yourself privilegued enough of having your mere existance not being criminalized by the government under threat of public execution!

https://ilga.org/wp-content/uploads/2024/02/ILGA_World_map_sexual_orientation_laws_December2019.pdf
https://infosec.space/@kkarhan/114697690127511140

@forthy42 @pascal_f @ulrichkelber selbst dann würde ich nicht darauf vertrauen dass der #DRM-Trick den @signalapp nutzt dauerhaft funktionieren wird.

• #Microsoft könnte dies auf allowlisted Apps bzw. bekannte Checksums/Programme limitieren oder explizit für #Signal deaktivieren.

Alle #API|s und #ABIs unter #Windows sind reine Bitten: Es gibt kein Anrecht (weder dokumentierte "MUST" capabilities noch juristisch) aufbZugriffe und Funktionen!

Wenn Signal kein #Shitcoin-#Scam (#MobileCoin) und #VCmoneyBurningParty unter #CloudAct wäre dann würden diese aktiv #Windows11 (und alle anderen Windows-Versionen) aussperren und stattdessen #SelfCustody, #Dezentralisoerung, #Tor und #Datensparsamkeit umsetzen!

https://infosec.space/@kkarhan/114695158410619458
https://infosec.space/@kkarhan/114695449755257786

@dexternemrod @ip6li @chrisstoecker @monocles @gajim @delta @thunderbird @signalapp egal ob #PGP/MIME oder #XMPP+#OMEO geht alles über @torproject / #Tor inkl. #SelfHosting sowie #Compliance zur #Archivierung von Nachrichten (deshalb bietet sich #deltaChat zur sicheren Kommunikation im Geschäftsumfeld an, weil #eMail-#Archivierung damit genauso easy möglich ist!)

@chrisstoecker Dazu sollte man wissen, dass Signal auch Meta-Daten sammelt und die NSA selbstverständlich auch darauf Zugriff hat. Threema fordert für die Anmeldung zwar keine Telefonnummer, aber Meta-Daten gibt es da auch. Für Investigativ-Journalisten und deren Informanten bleibt letztlich nur noch @briar - es nutzt das #Tor Netzwerk und ist ein P2P Messenger.

@davidgerard @pelle @ambiguous_yelp well I'd rather see #Tor succeed in what they're doing