Join us for an exclusive event exploring the findings behind our latest cross-border investigation into financial scam networks #ScamEmpire. In this live OCCRP Briefing, journalists who broke the story will explain why #KYC and #AML safeguards failed to stop it: https://mailchi.mp/occrp/occrp-briefing-the-future-of-anti-corruption-efforts-2765977
@dzwiedziu @fj @signalapp not really, as the #Metadata #FUD cited by #Signal is mitigateable with proper measures.
Every claim that things like #ITsec, #InfoSec, #OpSec & #ComSec can be solved with "Just use Signal!" is "#TechPopulism" at best if not being a "#UsefulIdiot"!
@Andromxda @pixelcode How can you claim something you can't evidence?
It makes you look like one of those folks shilling #VPN|s that ain't logless after all...
At least they should be honest about things and not claim bs, cuz demanding a #PhoneNumber is just #KYC with extra steps like demanding any #SSN or other #PII. Makes them look like chinese MMORPGs that demand ID card numbers for account signups, thus #paywalling the ability to use their service anonymously...
@signalapp It's not #disinfo when one points out that you demand #PII aka. #PhoneNumbers from Users and that is literally a architectural vulnerability, alongside your #proprietary & #Centralized #Infrastructure.
Not to mention the lack of @torproject / #Tor support with an #OnionService or the willingness to fulfill #cyberfacist "Embargoes" or shilling a #Shitcoin #Scam named #MobileCoin!
And don't get me started on the #cyberfacism that is #CloudAct.
I may nit have allvthe.evidence yet, but #Signal stenches like #ANØM: #Honeypot-esque!
@jrredho @walkinglampshade @fj
Don't 'splain me, m8!
Their figleaf exuses are not legitimate and @signalapp's @Mer__edith knows that...
Read criticisms before commenting...
https://www.youtube.com/watch?v=tJoO2uWrX1M
@expertenkommision_cyberunfall @dideldum @leachimus @EUCommission @BaFin @ecb
Dass dies technisch möglich ist - inkl. Einhaltung von #Identifikationspflichten (#KYC) und #Geldwäscheprävention (#AML) beweisen Zahlungsdienstleister wie #NowPayments regelmäßig!
Und natürlich nicht mit irgendwelchem #Blockchain-Müll, dafür #dezentral, #P2P mit Förderation (vgl. Fediverse)...
Die Technologien dazu existieren...
#ZachXBT is probably world's greatest crypto detective. He's pro-crypto but has busted a *ton* of frauds and scams.
Recently he's been working on tracking #NorthKorea's massive money laundering operation in the wake of the #Bybit hack and seems to have concluded that the entire crypto industry is fucked (which some of us have known all along).
* Telegram link: https://t.co/7Fi2sk1cqF
@leachimus #EU-only wäre prinzipiell eine Totgeburt, weil nur globale Verfügbarkeit taugt...
#Datenschutz ist wegen #KYC & #AML illegal bei #Zahlungsdienstleister|n!
@kuketzblog das größte Problem si d #Zahlungsdienstleister.
Merke: rein regionale oder gar nationale Lösungen sind keine Alternative zum #VISA / #MasterCard / PayPal - #Tripol und sowohl #Stripe als auch #Klarna sind nicht wirklich konkirrenzfähig.
Eher werden wir #Monero als #Zahlungsmittel beim Durchbruch in den globalen Mainstream sehen!
@cryptadamist @KimPerales OFC.
Obviously the ultimate beneficiaries propably need to figure out a way to do the #ShitcoinLaundering over time or find buyers willing to take #filthy #Bitcoin off their hands that'll instantly get flagged by any #Shitcoin - #AML tool there is...
Whoever is behind this must have some #Marsallek - Style "Business Network" or is going to spend several years sitting on it and casually siphoning parts for tumbling once it isn't in the immediate focus of #Blockchain #Analytics experts and #LEA|s...
Chances are pretty high the one in control is chillin' in #Dubai and speaks Russian...
@GossiTheDog the sheer fact that #MSPs & #CSPs can access clients' setups without proper #authorization [including #KYC / #KYB, #AuthCode|s and proper authorization via contract] is already sickening.
Such fundamental #ITsec fuckups are reasons alone not to use #Azure or any #Microsoft products & services at all...
Deshalb ist es wichtig keinerlei #PII von sich zu geben!
(Und ja, das trifft auch indirekt via #Telefonnummer zu!)
@Avitus @lispi314 @lauren THE REQUIREMENT FOR A #PhoneNumber BY @signalapp IS LITERALLY THE PROBLEM!
If you gonna say "JuSt GeT aN iMpOrTeD #SIM / #eSIM!" then you obviously expect people to have way more #financial means and #TechLiteracy than is needed to get absolute N0obs setup withb#XMPP+#OMEMO and pay for @monocles / #monoclesChat!
Good news (at first glance): Silent Connection Ltd and Dolphin 1337 Limited, two UK-based corporations flagged by Spamhaus as being used for bulletproof hosting, were compulsory dissolved on January 28th and January 14th, respectively. 
Unfortunately, their networks (AS215240 and AS215208) remain active...
Silent Connection quickly secured fresh IP blocks on January 26th through ZeXoTeK IT-Services (whose website, zexotek.de, oddly redirects to Google 
). Similarly, Dolphin 1337 Limited acquired new IP space on February 4th.
Even after both companies' were dissolved, these IPs are still operational - effectively making them digital no man’s land.
Luckily, Spamhaus DROP users are protected by the following listings:
DROP 176.65.134.0/24 -> https://check.spamhaus.org/results?query=SBL673819
DROP 176.65.139.0/24 -> https://check.spamhaus.org/results?query=SBL673820
DROP 176.65.140.0/23 -> https://check.spamhaus.org/results?query=SBL673821
DROP 176.65.142.0/24 -> https://check.spamhaus.org/results?query=SBL673822
DROP 176.65.144.0/24 -> https://check.spamhaus.org/results?query=SBL673823
DROP 176.65.143.0/24 -> https://check.spamhaus.org/results?query=SBL673922
This incident highlights why robust customer vetting is a necessity. Silent Connection's imminent dissolution was already visible on the UK company register as of November 5th - a clear red flag. 
Spamhaus recommends always vetting new customers, and checking their commercial registry data before providing services. 
Find a link to the DROP Lists in the comments 
#RIP #FirefoxOS, cuz @mozillaofficial refusing to sell #develooers devices made it a stillborn!
1) #CloudAct is just #CyberFacism, look it up!
https://en.wikipedia.org/wiki/CLOUD_Act
-
2) @signalapp 's #Server code is proprietary and since it's centralized we can't trust that the code they release is what's running on their backend!
-
3) #Signal still demands #PhoneNumbers which are #PII either by association (#Number => #ICCID = #SIM = #IMSI => #IMEI => Location Data as I explained beforetwice) or mandatory #KYC / #ID requirements (even on prepaid cards), which an increasing amount of juristictions do...
-
But don't take my word for it.
https://www.youtube.com/watch?v=tJoO2uWrX1M
@dave and most worringly:
"How is any #bank allowed to open up accounts, Issie a #CreditCard and ship it without explicit prior consent of you as the customer who's name it's on?"
Like ain't they afraid someone may steal it and swipe a shitload of stuff with it?
@not2b @dangillmor I mean, she's just a #cyberfacist like #Zensursula, and the only correct way to deal with these #facists is to "#EncryptHarder!" (with #XMPP+#OMEMO & #PGP/MIME) and tunnel everything through @torproject / #Tor and setup #OnionServices for everything!
@lucasmz @Avitus @david_chisnall the benefit of #XMPP+#OMEMO is that there are several providers, including free options...
All #PII incl. #PhoneNumbers can and will be abused by existing governments and if users don't pay, then they are the product and their data is the one to be sold.
After all, you have the same cost problem with phone numbers. Even if one doesn't pay per line/number and never pay for calls and texts, they still have to top it up to extent validity.
Plus you relying an unfixably insecure #Telephony makes a system inherently unsafer than it needs to be...
Also #Signal is able and willing to use said PII to restrict and ban users and if I were some dissident in Cuba or North Korea or even just Eritrea or Yemen I'd not rely on non-enforcement of #OFAC / #USML / #ITAR since Signal can obviously distinguish & identify accounts by virgue if their #PhoneNumber!
Hi, I'm Magnus. Pretty new on here, but not entirely: I had an account on #MastodonSocial, but that sucked. Before that I was on Twitter for some years as The Money Machine (@para_paramoney).
I recently quit my bank job ( #KYC/ #AML) and moved from #Copenhagen to #Svendborg into a #collective housing situation with 11 new comrades, in a giant house in the forest.
