• 0 Posts
  • 46 Comments
Joined 1Y ago
cake
Cake day: Jun 17, 2023

help-circle
rss

Water bowls are stagnant water and animals can sense that and do not like it. In nature, stagnant water is dangerous and kind of a last resort. Heck, even humans can taste this and probably don’t like it. Try leaving a bowl of water out for 24 hours and drink it yourself, you might be able to tell it’s not good.

Fountains keep that water tasting fresh, though tbh they might fill it with micro plastics or something so who knows if it’s really an improvement.



We recently got a demonstration of that with the “spicy pager” attack Israel pulled. A laptop could be even more devastating.


Generally i don’t think they catch too many people this way. If they had they certainly would have been talking that up during the Bush administration when they were looking for anything they could find to hype up the terrorist threat but they barely ever had anything to show for it. Some shoe bomb thing that didn’t even work, i guess.

Meanwhile, it’s well known that this stuff fails to catch weaponry and other dangerous objects regularly. I could link a story but i, myself, experienced this once: I forgot to take a 4" knife out of my backpack before flying and sure enough, they didn’t find it even though they “randomly selected” me for a manual search. (They were too distracted by the multiple laptops and phones is my only guess, but the knife was buried in there deep and i didn’t find it when packing either.)

I didn’t even notice until i was already at my destination and so i didn’t have much choice but to bring it back through security a second time and hope they didn’t catch it. Sure enough, they missed it the second time.

Fundamentally, the TSA is an organization that tries to replace skill and attention with technocratic rules following but you’ll never have a successful security operation that way. This isn’t the fault of the people doing the work, they’re treated like McDonald’s employees but they’re being asked to hassle everyone safeguard our flights. The primary motivating factor for this appears to be fear–both fear of bad things happening and a desire to instill that fear in others. That is also not an effective organizing principle for a security operation.

Why the tracking, then? That’s simple: it, too, is theater but it’s also a form of control. It gives the state more insight into and control over our personal lives.


I’ve already addressed this but i guess i’ll expand on it.

Signal would not be able to add backdoors to all its users. Security researchers would see pretty quickly (more below) and that would be pretty big news because Signal is quite popular with people who care about their privacy.

They could in theory backdoor an individual’s Signal app but, again, that’s pretty inefficient. If anyone ever noticed it would be a big black mark against Signal, though they may not have much choice in the matter if it really came to it. However, we know that big governments and other sophisticated attackers usually prefer to just stick spyware on your phone. It’s easier, more comprehensive, and doesn’t require collaboration with Signal.

In contrast, you don’t need to do any of that with Telegram because it’s not E2EE. Your argument is basically “security features can be defeated by a sufficiently advanced attacker so use this other service that doesn’t have them to begin with.” This makes no fucking sense.

I don’t know what you’re talking about with FOSS stuff. Yeah, Telegram is open source. Signal is too. Some Signal forks (particularly the ones with “Signal” in their names) have been killed but others still exist, ex molly.im.

Signal client does have reproducible builds and has since 2016, as far as i know. This is another point against Signal being backdoored.

Beyond that, Signal has gone through a number of formal security audits. As far as i know, Telegram has not.

Finally, Telegram itself. Telegram could simply enable E2EE for all chats. They choose not to and that is concerning if you care about your privacy or security.

Yeah Signal could be better but that isn’t a case to use Telegram over Signal when Telegram is worse in almost every respect.


(Properly implemented E2EE is too difficult at the moment but those are some big caveats. Still: didn’t use Telegram.)


No, they cannot do it. That’s what E2EE means. It means they do not have the technological ability to do it. It is not possible.

Yes, even if a judge orders. You can see instances of that on their website: https://signal.org/bigbrother/

Yes there are weak points (the huge one with Signal being: requiring your cell phone number as a part of authentication) but that’s far beyond the level of technical expertise required to, say, just intercept clear text communications, ex from Telegram. If a government is wiretapping you then you’ve got problems that neither Signal nor Telegram can solve.

Now maybe you will suspect that a three letter agency will force them to do something bad, like send a suspect a hacked/backdoored version of the app or something but by and large i don’t think they would do that. They’d just go to Google or Apple and put a keylogger on your phone, or some other solution. Realistically, though, this is a level of effort far beyond what >99% of all humans need to worry about. Choosing Telegram over Signal because you’re afraid the government is manipulating your Signal app is a sign of incoherent paranoia.

A more serious concern would be, for example, the government capturing all data sent across the Internet and then holding onto it until some hypothetical future computer is developed that can just break the encryption. That’s still pretty silly but it’s something the US (at least) is doing. Still way beyond what they would need to get your Telegram messages because, again, they don’t need to decrypt those. They can just look.

The difference being: Signal cooperates as they’re legally required to buy do not have the technological capability to betray you. Telegram has the technological capability to betray you (and governments can spy on Telegram, with or without Telegram’s assistance) but refuses to cooperate.

Signal is much better and more reliable in this.


They can order Signal to turn over data (and the have) and signal has complied when it was legally required of them to do so, handing over all of their no data.

That’s the difference.

If that weren’t true they wouldn’t be so constantly upset about E2EE.


Specifically, they have the technological ability to prevent some crimes on their platform and have repeatedly refused to do so, or even engage with attempts to do so. Because they’re not E2EE they can see what everyone is doing and are therefore legally required to step in when someone is (for example) selling drugs on their platform.

Signal (etc) have no insight into the actions of their users and when they are legally required to take action they do, they take the minimal legally required action (unlike other services from, ex, Apple). Signal follows the law, Telegram does not.

States are really pissy about E2EE for this (and other) reasons. They want to get rid of it because they want to monitor all private conversations. That’s why E2EE is important.



I get it, i don’t want to live in China but i don’t want to live in whatever Elon Musk has planned for the US, either, and his wealth gives him undue influence over… pretty much everything. You’re not convincing me you’ve got a consistent take here if you’re cool with Twitter but not TikTok.


Yet nobody cares about US companies like Twitter, Facebook, and YouTube manipulating public opinion with their algorithms.


Europe does have some Union representation in the corporate org structure, fwiw. How much that helps… well… i’m not sure, i haven’t seen it up close.





This is so fucking frustrating. These fuckers don’t care about kids, they never did. Not now, not back when this was copa, not before that. I’m so fucking tired.


What benefit is there to “growth” for its own sake?


Yeah this would be like Google saying Google Search was “open source” because map-reduce was open, or something.


Man it’s crazy how these fuckers basically get to ignore copyright law whenever it’s inconvenient to them but if you have one too many Windows machines provisioned they’ll send the Spanish Inquisition after you.


Yeah, even if zero people ever consented the ability to defeat end to end exception would still be required in the software just in case someone ever did consent. That’s all governments need to bring their other powers down on companies. They can spy on whoever they like with this.


I don’t think i care what Jack Dorsey says that isn’t backed up independently. Even if he’s right i just don’t trust him.


Joe Darby came forward with the photographs, effectively leaking them. Rumsfeld later leaked Joe Darby’s name and identity, leading to him receiving death threats.


The state is kinda bad and it’s not only Right-Libertarians who say that. Even so, leaking documents is not always bad. Like, the Abu Ghraib leak was objectively good.


That sounds like a gdpr violation. Companies can keep some things under the gdpr even when asked to delete them but i doubt your comments or whatever fall into that category.


Even if they don’t have your comments, if you find a gdpr complaint they will have to show that. You can ask to see any data they have on you and also ask them to delete it. (If you’re actually going to sue them don’t ask them to delete it, though. You’ll need that in court.)



“Commandment of celibacy”???

I am pretty sure that’s not a thing? Like that’s not one of the big ten. I don’t remember Jesus saying anything about commanding it, though he said to accept it if you can. I do remember stuff about rich people, though. That may be relevant considering they’re spending $4mil to go after gay priests…


Camera could be taking pictures of QR codes to make it easier to set up a VPN.

Bluetooth could be integration with things like Yubikeys for authentication.

Dunno if that’s what they’re actually for, though.


That’s not only principle, it’s very practical especially with a service like this.


I watched a bunch of that too but what was a little concerning to me was holding up Destiny as an example of a good use case for the service. There’s a reason Destiny keeps getting banned from every platform he touches. Putting him up front and center makes me wonder if they have a plan to deal with problematic people (like Destiny). Are they just going to the up hosting white supremacists and Neonazis? That’s not really a (meta)platform i want to support.


At least the UK is willing to acknowledge they want something impossible, haha. In the US they’d just say “do it, math be damned”.


Yeah i trust them more than the alternatives.


You’d basically be harassed by law enforcement and the NSA until you agreed to spy on your users. In the US at least.


Anonymity is good but that’s not the biggest problem with Signal’s reliance on phone numbers. Phone numbers are just not secure and not designed to be authentication credentials. Phone services are vulnerable to a large number of exploits and that’s never going to change. Signal has a number of mitigations to try preventing those exploits from hitting people but that’s a bandage at best. Reliance on phone numbers is a gigantic weak point in Signal’s privacy and security.


The phone number thing is a major problem but Signal just has the momentum imo. Ultimately, they’re gonna need to fix it or we’re all going to have to stop using it.


Aside from the horrendous privacy implications, this sounds like a gigantic waste of money. It’s just waste for the sake of waste. there’s no benefit to doing all that.


Probably for audit/investigation reasons.

IT generally doesn’t care (doesn’t want to care) but you still shouldn’t do personal stuff on work machines/profiles.


I feel a little encouraged that big tech firms are balking at this UK legislation more than (say) the gdpr. I hope they find the will to refuse to cooperate.


“Your privacy has value to us [and our 1000 best friends].”