• 0 Posts
  • 27 Comments
Joined 2Y ago
cake
Cake day: Dec 20, 2022

help-circle
rss

It’s crazy to fear for Chinese espionage/tracking more than European or US one


No? If you accept tracking while on the page, this has consequences on your current session


It’s run by private companies, they’ll sell your location, face, habits, what you do and like in real life in addition to your online profile. Then they can do whatever they want. Sell you things, manipulate what you think


In part, yes it is. In the part where you want privacy from tech corporations


I never understand the presence of right wing people in privacy discussion actually. After everything they deliberately give up to either a fashist state or corporations


Plus, Grayjay is made in part by the guy in the post picture




I want Proton to replace Google. I wish for that. And during this time we can use open source software as well



RCS is just SMS experience through Google’s servers, just like what you have with iMessage. It may even be worse in term of what the companies extracts from your messages. Only usage I could see is if you want to use a matrix bridge that only works with RCS, like Beeper (since Apple does not enjoy users signing in with the iMessage bridge)

Oher than that, I enjoyed RCS messages when I was a Google fanboi and did not care about privacy. It still offers a better “security” than regular SMS, but you chose to deliver your texts to Google


It’s a different OS, based on AOSP




Indeed I have 1Password (was the best proprietary) and I’m switching to Proton Pass. This year they lacked features but their integration of their Simple login email aliases is game changer


The hacker on the other side of the RAT is getting scared but comes back as a kink


Extensions will soon be ported to mobile Firefox, if the developers do it


Well this is not particular to Beeper, that’s always the case when using Matrix + Bridges for third parties right? Even though they are the main mainteners of a good part of the existing bridges


Ok thank you so much. What I would like to point at in the difference between having an end-to-end encryption between two recipients and at-rest encryption for information owned by Signal (in this example), is the purpose of those two different things. E2E encryption means only the two agents at each end have the mathematical possibility to decrypt the info: this is privacy by design. At-rest encryption on Signal servers of different things is a security layer meant to protect users’ privacy against attackers, but Signal have the means to decrypt it, and they would do it in the normal usage of the service. This would also mean they can (and have to) transmit decrypted information to whatever agency demand them to


Thank you for that info and the link I’ll go into that. Just to summarize, if you have the knowledge and time: this is at-rest encryption? I’m not sure how it could be end-to-end encryption and at the same time enable to start new conversations with other Signal users / discovery based on name / phone number


Nope only the message content is encrypted. So what they have unencrypted is of course your personal information (phone number etc), all your contacts, and the list of all messages sent (datetime, and contact or contacts). This enable them to have a great social map that evolves after each message sent

And that is if the encryption remain unbroken. Don’t forget that the NSA has a history of placing backdors in cryptography schemes (like that mathematically flawed key based on a weak elliptic curve, standardized and approved by the NSA after they found their exploit)


You can find this online easily. Some of the things are: they’ve been funded by the Open Technology Fund, created for Radio Free Asia, which is a program by the CIA. The fund is now financed by the US Congress


That’s the thing. Anonymity on the internet should enable people to protect themselves against unethical laws. Law is not correct, it’s just law


Is this about message content security or privacy?

I would love to have more insights on Beeper actual privacy. But one think to keep in mind is that they are subject to Cloud Act.

Specifically for OP: since you post on this privacy focused community but also are not very clear with your intent, I just want to remind that Signal is not the best messaging app when it comes to privacy, especially because of its close relation to CIA


I did a bit of research for my personal use and what came out as the best options in 2023 are indeed SimpleX and Briar. What do you think of the latter?