soziawa

10 ms·

31.
by soziawa 5y ago
Kinda > We also show how an attacker can mount an “attacker-in-the-middle” attack on the initial key negotiation between the client and the server. This allows an attacker to impersonate the server to the client, allowing to break confid
32.
by soziawa 5y ago
> Isn’t Signal FOSS? I don’t know how they’d police that when everyone can just fork it and remove the back door. If the goal is large scale surveillance, it can be combatted fairly effectively as has been shown with e.g. kino.to and oth
33.
by soziawa 5y ago
> For Chat tg/signal seem like they would but I am less sure what the best option is for email. Something that doesn't store the chats in a decryptable form on their servers is probably preferrable. So Telegram out and Signal,
34.
by soziawa 5y ago
> Signal is probably at the current time the last non-corporate messenger that is secure and is easy enough to setup and use (other suggestions like Matrix have a barrier to entry that is too high because it requires both technical knowl
35.
by soziawa 5y ago
> Does anyone have any insight into the major differences between native and web app in 2021? No general insight, but Telegram has two web apps that try to emulate the native app [1]. They do work fairly well but are definitely glitchier
36.
by soziawa 5y ago
Yes, they very publicly state that they do not have access and I have yet to see a reason to not believe them in that regard. All big Facebook data leaks and hacks have just exploited not very well known APIs or badly set privacy settings.
37.
by soziawa 5y ago
This doesn't provide end-to-end-encryption for WhatsApp so I'd actually call this worse than just using WhatsApp in the first place. Facebook gets all the data and your messages are stored somewhere (either at Beeper or on your ow
38.
by soziawa 5y ago
I have had a similar setup with a remote server and a MacBook Air. If internet on trains were a bit more stable it would have been the perfect setup.
39.
by soziawa 5y ago
Why trust anyone ever?
40.
by soziawa 5y ago
> Rather than rehash all this here, there are a lot of posts about ProtonMail and the foundational claims they make about being a company operated out of Switzerland. I'd suggest reading those critiques. Looking at the top ten posts
41.
by soziawa 5y ago
Fair enough, but it looks like you are misquoting them. They never say anything about "100% pure Swiss security". Their messaging seems to revolve much more around an anti Silicon Valley proposition where you could substitute Swis
42.
by soziawa 5y ago
This looks more like it is supposed to mean not Silicon Valley, which is on point with the rest of their marketing and what is written about them. > Threema, die «Antithese des Silicon Valley-Modells» https://www.srf.ch/n
43.
by soziawa 5y ago
> The real news here is the crumbling facade of neutrality and trust that the Swiss have for a while now been allowing to crumble and run right through their fingers. What else except the Crypto AG case is there? And if it is just Crypto
44.
by soziawa 5y ago
> 1. Only the client apps are open source, not the server side. This shouldn't matter since you can't check what they are running anyways. > 2. https://en.wikipedia.org/wiki/Underhanded_C_Contest This i
45.
by soziawa 6y ago
Because pre-facebook WhatsApp wasn't that great. It was frequently down and didn't even use TLS. However Threema exists. It is paid up front and otherwise fairly boring: https://threema.ch/en
46.
by soziawa 6y ago
While they use the Signal protocol for encryption, they do leave more metadata on the server. For example your recently contacted contacts and all your groups.
47.
by soziawa 6y ago
Sure, but a precondition itself doesn't guarantee anything. You still need to pony up the money for actual aufits.
48.
by soziawa 6y ago
Additionally they have regular audits [1]. Open source only without any actual thorough reviews doesn't cut it in my opinion. [1]: https://threema.ch/en/blog/posts/audit-2020-en
49.
by soziawa 6y ago
But it can't sustain max performance. That is reserved for the MacBook Pro with a fan.
50.
by soziawa 6y ago
It is, Wingo is 24 CHF a month on the Swisscom network. Its also owned by Swisscom. The main differentiation is support.
51.
by soziawa 6y ago
Telegram shouldn't be considered secure due to the lack of e2e encryption by default.
52.
by soziawa 6y ago
No group calls, but one to one calls have constant bit rate encoding which is considered to be more secure. Quality is amazing on good networks and not worse than others like WA or Wire on bad ones.
53.
by soziawa 6y ago
> Within the next months, the Threema apps will become fully open source, supporting reproducible builds. Probably one that only allows creating builds for reproducibility. Which is perfectly fine in my opinion, as they are supported by
54.
by soziawa 6y ago
How do you automatically test restores?
55.
by soziawa 6y ago
It is. It just requires additional beacons and at least one point where a real identity can be matched.
56.
by soziawa 6y ago
> Carrying a loaded rifle was illegal, but how would the public know one way or the other? You're mandated to carry it without the trigger mechanism and without magazine. It's quite easy to spot the difference.
57.
by soziawa 6y ago
You can do that on iOS as well. That has been a feature for a long time.
58.
by soziawa 6y ago
That is just what WhatsApp stores about you on their servers i.e. contacts and groups. But you can export all chats one by one.
59.
by soziawa 6y ago
Telegram doesn't have encryption for groups though.
60.
by soziawa 6y ago
I like Threema. You don't have to provide a phone number to create an ID with them. You can create a backup of your private key in a completely offline way but there is also an online backup for convenience. Telegram is great for publi

More ›