maqp

45 ms·

541.
by maqp 6y ago
When I was a kid I remember creating mazes with straight line from entrance to exit and calling the attractions "Scam 1", "Scam 2" etc. I'd then set the price low enough for quests to enter and I'd snicker when
542.
by maqp 6y ago
" if you're serious, then it's because of Pavel Durov's personal wealth." Any source on the amount? "if you're unfamiliar Pavel Durov created VK" Ah I see, what's the business VK is on? How did P
543.
by maqp 6y ago
"I think it's important to distinguish mass surveillance from targeted surveillance. They present very different threat models." Targeted attacks against centralized points that enable wide-scale surveillance are mass surveil
544.
by maqp 6y ago
Jesus Christ, that must be fourth or fifth "whitepaper" I see from the cryptocurrency community. Here's what a proper whitepapers should look like: https://signal.org/docs/specifications/x3dh/x3
545.
by maqp 6y ago
"when they accepted new owners/investors." IMHO we should be able to determine the amount of trust we can put on the app from the client alone. If FOSS client uses E2EE, no matter what the server starts doing when the service
546.
by maqp 6y ago
That's good. The last time I had a look at Matrix clients it was a mess. IIUC the E2EE isn't enabled by default for the old Riot client, only RiotX and Riot web have it. What happens if someone with old Riot client creates a room
547.
by maqp 6y ago
If only the ecosystem had been built to use E2EE by default, always. They fucked up with the design allowing bridges and bots, left E2EE for later, and now they're in the vicious circle of downgrade attacks until all major clients swit
548.
by maqp 6y ago
E2EE only protects content. Metadata is also very important and where as p2p apps like Briar, Ricochet, Cwtch and TFC hide it from all, centralized and decentralized apps have one or more weak points that allow eavesdropping on larger amoun
549.
by maqp 6y ago
"some way to protect metadata (e.g. self-hosting)" is incompatible with Wire. Let's not just scream product names without understanding if it's for their threat model. If you're here to promote Wire then I perfectly
550.
by maqp 6y ago
>Any wired connaction is tapped Thats what encryption[1] is for. [1] https://en.wikipedia.org/wiki/Encryption
551.
by maqp 6y ago
And the way to agree on the code over the radio anyone can eavesdrop is?
552.
by maqp 6y ago
No it's being marketed to protesters, it's not helping violent people in any more ways than oxygen is. Let's ban oxygen from street thugs too? The cops are already doing great job on that. Also, privacy this app helps to prot
553.
by maqp 6y ago
Quick unrelated comment from the peanut gallery: Every time any crypto-currency related messaging app is published, I think it should be mandatory to immediately explain what the currency and/or blockchain brings to the table. Is it a
554.
by maqp 6y ago
"some way to protect metadata (e.g. self-hosting)" From whom are you trying to protect metadata? Briar distinguishes itself as a platform that doesn't leak it to anyone. Matrix always has at least one central point for metada
555.
by maqp 6y ago
The more classic example is display cables like VGA, DVI and HDMI emanate signals that can be used to reconstruct the image displayed. Doesn't work for newer high speed HDMI though. Old BBC documentary on the topic https://w
556.
by maqp 6y ago
Regarding transparency, imagine the faces of the journalists who in 2018 went to check Telegram's offices in Dubai and the Aramex employees who share the floor with Telegram said they've never even seen anyone enter Telegram'
557.
Simulator of the Finnish m/83 parsa military encryption device (AES/E2EE)(sainigma.itch.io)
2 points by maqp 6y ago|0 comments
558.
by maqp 6y ago
>He's living abroad because he's either not allowed or does not feel safe entering Russia. He has since entered Russia. Also, Durov's warrant was dropped just two months after he went exile. Stop inventing things. >VK w
559.
by maqp 6y ago
The Russian state knew the ban wasn't effective, they just wanted to save face for being humiliated wrt Telegram not handing private TLS keys. They never needed those keys however, they've always had the capability to hack the ser
560.
by maqp 6y ago
They've always had that capability. 1. Hack the server 2. Read every dissident groups' messages. 3. No step 3.
561.
by maqp 6y ago
Durov's exile lasted for less than two months https://www.nytimes.com/2014/12/03/technology/once-celebrate... He was never properly persecuted. He never had a close call with McPolonium when eating
562.
by maqp 6y ago
There's no evidence the ban was a PR stunt, but it did play into Durov's hands, and through that, into the hands of the Kremlin when every dissident flocked to a service with centralized attack point to compromise all group chats
563.
by maqp 6y ago
Explain in technical detail why the cool features (like stickers) can't be implemented with E2EE when Signal is doing that at constant pace? Telegram doesn't have E2E encryption for groups or Windows/Linux desktop clients, ev
564.
by maqp 6y ago
Joining a conversation with throwaway account to list shill points that encourage people to use a dangerous unencrypted communication tool for everything is anything but acceptable.
565.
by maqp 6y ago
>I would bet that 99% of these privacy people still use email. The question is, what is email being used for? Communicating with people who we don't have private interaction with? Having academic discussion on mailing lists? That st
566.
by maqp 6y ago
>Let's be honest the real reason to use Telegram wasn't security Yet the VERY FIRST feature presented in Telegram's front page is privacy: "Telegram messages are heavily encrypted and can self-destruct." Heavily
567.
by maqp 6y ago
> instantly reveals your real identity to any snoop, snitch or government mole. Yeah, WA isn't anonymous. The problem is with Telegram storing all your private messages on their cloud, by hacking the server, just knowing your userna
568.
by maqp 6y ago
Good point. Also, two of its servers reside in the US. And in Malaysia, the server is "fair game" to NSA hackers (as well as any other foreign government). The non-E2EE comms are a joke and a liability of insane proportions.
569.
by maqp 6y ago
>it's not controlled by a Western government. That doesn't mean it can't be trivially hacked by a Western government. When you're using service that isn't using E2EE, you're just making two statements: 1. I
570.
by maqp 6y ago
The problem is, people think Telegram ban means Telegram is secure from Russian state actors. The truth is, Russia employs hackers of their own that hack Telegram's servers without trace and read messages of anyone they find interestin

More ›