Happy to see a privacy-focused carrier, and it has better policies than any other carrier out there. But founder is formerly from Palantir and there’s a lot of VC money behind it (not inherently a problem, just flagging).

Thoughts?

I think they mean private as in, not a publicly traded company. Palantir would never ever ever respect anyone’s privacy, and under no circumstances ever can it be assumed that they will have ethical business practices.

This is a hard no. Fuck Palantir. Also, fuck Theil too. Hope he rots.

Matt
link
fedilink
325d

Just use Airalo.

@collar@lemmy.world
creator
link
fedilink
125d

I don’t think this is really a replacement for the offering that Cape is proposing. Airalo are data only eSIMs and target consumers who need short-term data plans while traveling abroad. This is not a replacement of your primary carrier service and doesn’t give you a phone number. Additionally, other than the transient nature of the temporary eSIM you buy, there are no notable privacy-focused features behind Airalo.

Not saying Cape follows through with its claims, just saying these are not really comparable offerings.

PrivateNoob
link
fedilink
1225d

Cell providers such as Telekom, Verizon, Yettel etc. have to provide Lawful Interception support for countries’ law enforcement agencies, and these are implemented in a way, that not even the cell providers is aware when a said subscriber / user is being listened on.

Otherwise I would guess a cell provider can’t operate in that country if it isn’t willing to provide this support?

@collar@lemmy.world
creator
link
fedilink
325d

I don’t have an issue with telcos complying with lawful warrants, which is what Lawful Interception requires. but if your telco can only turn over limited amounts of data because that’s all it has access to, then that’s a plus.

Separately, do you have a source that telcos are unaware when LE is wiretapping? LE would likely need the assistance of the telco to do so and the telco should require the warrant.

PrivateNoob
link
fedilink
225d

Well I have read it in a 10 year old ppt training at my telco provider company where I work at, which only mentioned this with 1 sentence without any source either, and probably that would have been an internal document too, so unfortunately you have to take my word for it.

@collar@lemmy.world
creator
link
fedilink
224d

Fair enough!

And almost every cell provider that is small is only piggybacking of one of the big 3.

Palantir, end of discussion.

Catalyst
link
fedilink
141M

It’s also like $100 a month.

@collar@lemmy.world
creator
link
fedilink
31M

True, expensive. Prosper to offset no selling customer data.

Catalyst
link
fedilink
91M

I refuse to believe they didn’t do this for their benefit. Especially at the price tag. I feel the same about Proton. The minute the government knocks without a warrant they’ll still turn you over.

@collar@lemmy.world
creator
link
fedilink
125d

Maybe, I couldn’t say if it’s a premium for privacy, marketing, or what.

As for turning over data without a warrant, I don’t have a problem with companies complying with lawful orders, as Proton does. I don’t think there’s any evidence to support the notion that Proton complies with non-legal or mere requests from LE. Correct me if I’m wrong.

I think their tech works, they’re used by the army. The founder was the cofounder of Palantir, which I think is worth noting. Their focus is on US government use first and the average consumer second.

This is the exact reason that it is a hard no.

@collar@lemmy.world
creator
link
fedilink
41M

Yeah it looks like the cell network is the consumer facing product

It looks like a honeypot, and wtf is a “private cell network”? How are they gonna do that? SMS and phone calls aren’t E2EE

I’ve seen this ad here in Australia where cell towers are essentially all owned by a single telecomm (Telstra), who leases them out. No idea how their cell network could be private given that info

It’s private because it’s yours /s

pfr
link
fedilink
41M

This is probably a question for the Graphene forums

What? Lol.

Previously discussed three months ago at lemmy.ml/post/33176527. Not sure how to format that link correctly though…

Gonna guess a company that has no problem engaging with Reddit’s invasive targeted ad system is not that privacy conscious.

The cynic in me immediately thinks it’s a honeypot to trap privacy-conscious individuals.

I’ll look it up. But I suspect it’ll be just another case of a company pinky-swearing to respect your privacy, like Apple.

Yes. Cellphone carriers are a stupid concept. If I paid for my own cell service, I would use VoIP.

100% honeypot

Big encrochat vibes

@ivn@jlai.lu
link
fedilink
01M

What makes you think encrochat was a honeypot? Am I missing something?

Because they literally operated it as a honeypot and gave police full access to chats while advertising to criminals that it was safe.

EncroChat first came to the attention of the media when it was revealed that high-profile criminals Mark Fellows and Steven Boyle had been using the encrypted devices to communicate during the May 2018 gangland murder of John Kinsella in Rainhill, England.[16][9][17] The service resurfaced in the media during the summer of 2020 after law enforcement agencies announced that they had infiltrated the encrypted network and investigative journalist Joseph Cox, who had been reviewing EncroChat for months, published an exposé in Vice Motherboard

@ivn@jlai.lu
link
fedilink
225d

Where did you read that they gave police full access? I thought they were hacked.

Gravitywell.xYz
link
fedilink
12
edit-2
25d

That’s even worse then because they didn’t even have a secure network from start. Be it willful ignorance or intentional assistance, its still a honeypot. This was a huge “I told you so” by a lot of the dark net community when it happened, a lot of people called it WAY ahead of time.

Encrochat isn’t the only example, so i may have conflated it with one of these other Honeypot operations: ANOM, Phantom Secure , Ghost , SkyECC

You might be able to see a pattern here. People who actually want security and anonymity know that you can’t trust those things over to a corporation or a bunch of tech broligarchs, they will either betray you intentionally or due to their incompetence.

@ivn@jlai.lu
link
fedilink
525d

I don’t see how being hacked make it “still a honeypot”.

Gravitywell.xYz
link
fedilink
1
edit-2
25d

because it was being used to attract criminals into thinking it was a safe and legitimate service, while under theee surface it was relaying all the messages to law enforcement.

@ivn@jlai.lu
link
fedilink
325d

Yes but

  1. as far as we know they had no idea that it was hacked, so I don’t see how you can get a “vibe” if they are blind to it
  2. the criminals were already using it when LE discovered it and then hacked into it
James R Kirk
link
fedilink
10
edit-2
1M

Something can’t be both “100%” and vibes based lol

Unless you mean “I am 100% basing the following opinion on vibes”.

You need evidence. Please don’t respond with more vibes.

It’s two separate sentences, my guy… complete with a line break in between. So not even in the same paragraph. Did we just forget how to parse written language?

James R Kirk
link
fedilink
125d

Uh, he confirmed in a reply that he had no evidence and was deciding based on faith alone.

I am sure it is a honeypot, they will work with feds. I base that on the people behind it.

Also it reminds me a lot of encrochat which had similar vibes about it.

James R Kirk
link
fedilink
-5
edit-2
1M

This is depressing. Trial by vibes. I’m going to live in the woods.

Im not basing anything on vibes, this is how venture capital funded operations work.

If you expect some rich assholes to keep your chats secure and not cave after the slightest preasure, you’re going to get taken for a ride.

James R Kirk
link
fedilink
125d

I can’t believe I need to explain to someone that claiming you don’t need evidence to declare something to be true is faith based on vibes. Tiktok has truly broken the younger generations brains.

I cant believe i beed to explain to someone that venture capitalists are not good at security and do will not fight legal battles for the sake of their users. I linked multiple examples, believe what you want.

James R Kirk
link
fedilink
225d

[citation needed]

Which is why it’s a honey pot it’s basically for gullible people.

Could be a honeypot.

@collar@lemmy.world
creator
link
fedilink
31M

That’s always the concern with privacy-focused services, especially if they’re not open source or audited.

But if we think about the practical application – who needs a honeypot for cell phone services? Carriers already collect so much data (location, telemetry, payment, government-issued ID, etc) and sell it willingly to whoever wants to buy. How could Cape be any worse? lol. If they adhere to any of their stated policies it seems like a plus, no?

Additionally, at least to me, Cape is not marketing the way the Anom phone did, where it trying to gain adopting by nefarious users. That’s my take - I’m not advocating for Cape since I don’t really know much about them, but I’m trying to put things in context.

The way anti-fingerprinting techniques work is by making you as much of a background digital character as possible. A privacy conscious user spoofing location and network traffic data on AT&T, Verizon, or T-Mobile is going to be far less likely to be singled out compared to customers on some bespoke cell network.

You should try to fake your traffic on a standard phone network (Using something like GrapheneOS with more granular control) to simply appear like another faceless data point rather than a “paranoid privacy user who bought this subscription for the privacy people”, because that traffic will raise eyebrows much quicker.

@collar@lemmy.world
creator
link
fedilink
21M

Fair points. Different strategies for different threat models I assume. Anonymity through hardening (if we take Cape at their word, big if) or security through obscurity.

https://cyberscoop.com/cape-phone-privacy-calea-tracking/

Good article which points to a few promising aspects. They seem to have their own phones (as of Nov 24) as part of this. Second, that their market is “high risk” individuals. So people with money, it sounds like. If the pricing reflects a market for governments, celebs, and crypto bros trying to not get SIM swap attacked, then it’s not likely a honeypot for Feds. Maybe.

I hate the idea of only being allowed to use their phones, but that might just be their “easy mode” for idiot celebrities or government contracts. If they can give me a physical SIM, I’m interested.

I would not be an early adopter. Hang and see who isn’t a plant that joins.

zen_killoran
link
fedilink
21M

The best answer

@collar@lemmy.world
creator
link
fedilink
51M

So, they have their own phone that is for high risk individuals and is not available to the general public. Then, separately they have their own mobile network that you can use with any regular phone and they sell Pixels on their website (for $50, you can have them pre-load GraphineOS). The AD i posted is for their cellular network, which is not related to their own first-party device.

You should not use a phone with preloaded graphene without first checking the hash. It’s also kind of insane to charge $50 for it, when Graphene’s web installer just has you click buttons to install. You can even use another phone to do it.

@collar@lemmy.world
creator
link
fedilink
21M

100% agree. I would definitely not have them install graphene for you. Do it yourself so you know what’s in the installation

It’s a good call to post, but waaay too soon IMO too bother with it. It might simply be flash in the pan marketing for VC funding and not work. It might be a total scam. It might be legit and poorly run. It might be the real deal. It’s hard to say without more data.

The feds have already pulled a similar stunt with another manufacturer+software combo. (https://en.m.wikipedia.org/wiki/Operation_Trojan_Shield#Distribution_and_usage)

The only thing that makes this smell legit is the fact that it is a provider and probably only eSIMs. But even then, this is not very good opsec to be deliberately using a marketed product that will likely have an identifier for their cell traffic. Graphene works as well as it does because it runs of pre-existing hardware to be more inconspicuous.

they contracted with the AFP to run the first node of the server and process the data. (Australian law does not provide the same protections as U.S. law for its citizens.)

Thanks for that link. I didn’t know that. We are below the US in privacy laws! Is there any first world country worst than Australia?

They said all users were criminals, but who knows what they are calling a crime, specially with the retarded laws down here…

It shows what I suspected, that Australian software and servers must be avoided even more than Americans.

Well, opsec can only go so far. At some point you need data packets traveling over real wires, and it’s a question of who do you trust with unencrypted data like SMS? Using a data only VPN is “clunky” for wealthy manbabies, who demand less friction in everything they do.

Simply having your data going to their service is immaterial since it’s likely the phone number also indicates it’s a Cape carrier phone, and the IMEI of the phone doesn’t ping for any other carrier.

It’s a strong “ugh…maybe, we’ll see” from me, but I wouldn’t bother with it for another 6 months and see if it ends up one of those super elitist things wealthy people talk about only to each other.

Create a post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

  • 0 users online
  • 108 users / day
  • 435 users / week
  • 1.32K users / month
  • 4.54K users / 6 months
  • 1 subscriber
  • 4.35K Posts
  • 110K Comments
  • Modlog