@Em0nM4stodon@infosec.exchangeIn these troubled times, please remember to be doubly careful about protecting the privacy of others online.
Always ask before sharing any piece of someone else's personal data with a third-party.
This could be as banal as asking a person before sharing their email address with someone else or with some application or service.
Be careful. Sometimes it only takes one small piece of data to reveal an identity and put someone in danger.
Care for the data of others 
@Em0nM4stodon I'm pretty sure anonymity is dead. If it wasn't before the election, it certainly is now.
@kkarhan@Beggarmidas @Em0nM4stodon depends.
- Just don't become complicit by being a "unofficial enployee" for #NSAbook et. al. ...
@kkarhan @Em0nM4stodon The DNI has it's hands full already. Worry about the DoJ. Once darth gilligan & co hollow out the FBI & replace it with cronies, they'll be hell on greased wheels once they can figure out how to work the gear. Until now LEA has performed under considerable constraints. Once those are gone what they've been capable of all along will appall you.
@kkarhan@infosec.space@Beggarmidas @Em0nM4stodon which is why migrating away from #GAFAMs and anyone else.under #CloudAct is vital.
- And that includes @signalapp [use #XMPP+#OMEMO; i.e. @monocles / #monoclesChat instead] for obvious reasons [web.archive.org]…
@kkarhan @Em0nM4stodon @signalapp @monocles Yeah, signal looks to be the last bastion. But even then there will be a danger of side leaks. Pegasus could create a MitM facade mockup for instance.
@kkarhan@Beggarmidas @Em0nM4stodon #Govware aside, I think @signalapp 's #architecture of being a #centralized, #proprietary, #SingleVendor & #SingleProvider "solution" that.collects #PII like #PhoneNumbers will bite it in it's rear, cuz I'd not count on @Mer__edith not breaking when facing life in prison under torturous conditions (by European Standards).
- Whereas @monocles / #monoclesChat, @gajim / #gajim and other #XMPP+#OMEMO clients do real #E2EE with #SelfCustody of all the keys!
@kkarhan @Em0nM4stodon @signalapp @Mer__edith @monocles @gajim I just know that in ELINT there's almost always a way to the prize. It's just a matter of find ways of intercepting it before or after it hits the encryption layer. Anything that does work the ecosystem finds ways around it. Sooner as opposed to later. Moscow rules. If you know, you know.
@kkarhan @Em0nM4stodon @signalapp @monocles You can have a poisoned software package silently pushed to your phone that'll compromise even signal. I don't think anyone's come up with a blackphone worth a fuck yet.
@kkarhan@Beggarmidas @Em0nM4stodon personally, I do consider #Smartphones an attack vector and recommend everyone to use @tails_live / @tails / #Tails or at least @torproject / #Tor via @guardianproject / #Orbot and ideally open, #PublicWiFi like @freifunk / #freifunk.
Fortunately, @monocles / #monoclesChat integrates Orbot Support so it's just a few taps to get everything tunned through Tor [docs.monocles.eu]!
https://docs.monocles.eu/apps/torify.app/
If @signalapp cared, they would've #decentralized and put their backend on Tor and not demand #PII like a #PhoneNumber.
@kkarhanFor comparison monocles [monocles.eu] / @monocles doesn't collect any #PII whatsoever and one can get their #Apps not only for free (or choose one's own #clients because unlike #Signal they only use open & standardized protocols!) but also pay [monocles.eu] using #CashByMail and #Monero for maximum #privacy.
So it's not a #VCmoneyBurningParty but actually #sustainable!
@kkarhan @Em0nM4stodon @tails_live @tails @torproject @guardianproject @freifunk @monocles @signalapp I find it's just easier to accept that anonymity is dead, and if I ever become important enough to step on, they'll probably find me. But they wont find me easy to step on. >:) But as of right now, i'm a nobody. Who'd bother spending money bugging or tailing a nobody? Nobody.
@kkarhan @Em0nM4stodon @signalapp @monocles You want unhackable...Write a fuck'n letter with no return address you drop in a general post box. Not print. Write. Printers have invisible sigs embedded on each page printed out.
@kkarhan@Beggarmidas @Em0nM4stodon which only works if you wear gloves and use a laminar flow bench to prevent fingerprints and skin cells to be on it.
- #Sarcasm aside, I am working on something not dissimilar [github.com]...
@kkarhan @Em0nM4stodon Wow. A lot of that is above my head. But i'm impressed. Lemme know if it works out. Way things are going it'd be nice to have a secure way to pass information between resistance cells.