Kevin Karhan :verified: · @kkarhan
1488 followers · 108023 posts · Server mstdn.social
Kevin Karhan :verified: · @kkarhan
1474 followers · 106397 posts · Server mstdn.social@sqrt2 the only winning move is not to use #Microsoft Products like #Windows!
#AllGAFAMsAreBad #AllGAFAMsAreEvil #PRISM #ITsec #InfoSec #OpSec #ComSec
#comsec #opsec #InfoSec #ITSec #prism #allgafamsareevil #allgafamsarebad #Windows #Microsoft
Kevin Karhan :verified: · @kkarhan
1473 followers · 106395 posts · Server mstdn.social@geist Sorry, aber dass Microsoft nicht wegen illegaler Agententätigkeit für einen ausländischen Geheimdienst zwangsweise geschlossen und des Landes verwiesen wurde sagt doch alles über die lachhafte #ITsec, #InfoSec, #OpSec & #ComSec der Bundesregierungen aus...
#comsec #opsec #InfoSec #ITSec
Kevin Karhan :verified: · @kkarhan
1451 followers · 104327 posts · Server mstdn.social@enigmatico At least #Microsoft works hard to increase #AttackVectors for #Azure / #Office365 / #OfficeOnline...
But hey, whoever uses that shit has basically given up on #ITsec, #InfoSec, #OpSec & #ComSec anyway and naively believes that jst because "everydoy else does it too" it won't bite them in the ass once @noybeu is done with the #GAFAMs...
#gafams #comsec #opsec #InfoSec #ITSec #officeonline #office365 #azure #attackvectors #Microsoft
Kevin Karhan :verified: · @kkarhan
1433 followers · 101955 posts · Server mstdn.social
Was lernen wir daraus?
1. Sei kein ekelhaftes Arschloch (also #JulianReichelt)!
2. Wer #Anonymität um jeden Preis will, sollte #InfoSec, #OpSec, #ComSec & #ITsec praktizieren.
3. #Medien können nur dann die eigenen #Quellen (zwangsweise) offenlegen wenn diese identifizierende Informationen hat.
4. #Quellenschutz muss trotzdem gestärkt werden!
#Quellenschutz #quellen #Medien #ITSec #comsec #opsec #InfoSec #anonymitat #julianreichelt
Kevin Karhan :verified: · @kkarhan
1416 followers · 100300 posts · Server mstdn.social@sec_yote_agenda yeah, that's very sad and I sincerely hope this doesn't happen to anyone - whether they just wasted time waiting or even took money and ran...
Granted I'm more used in #IT and espechally #ITsec, #InfoSec, #OpSec and #ComSec where a minor fuckup will ruin decades of reputation-building in seconds and it's more or less impossible to recover from that...
So it's quite the opposite...
So #Escrow seems more than reasonable to enshure people ain't paying and/or working for nothing.
#escrow #comsec #opsec #InfoSec #ITSec #IT
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social
@porkroll WTF?
This is so typical for #remote #managed, #Windows-based #IT:
The #ITsec, #IfoSec, #OpSec & #ComSec gets completely trashed because fundamental tools ain't accessible and thus people are literally being forced to subvert it.
THIS is why I don't work as #IT for companies that don't provide me with #admin rights, because that's literally sabotaging employee productivity for no good reason.
https://toots.matapacos.dog/@porkroll/110777255070708961
#admin #comsec #opsec #ifosec #ITSec #IT #Windows #managed #Remote
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social@fla @Seirdy @neurovagrant But if you really have to face state-sponsored attackers of the #NSA kind you've already failed so hard in terms of #InfoSec, #OpSec & #ComSec that it's easier to fake the death of one than to even begin leveling up #ITsec.
So your points are entirely moot.
#ITSec #comsec #opsec #InfoSec #NSA
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social@Seirdy @neurovagrant problem is that #Signal literally implements #Cyberfacism by restricting functionality based off claimed user location (phone number)...
The fact that they can do that alone is concerning.
Now add #CloudAct to it and you badically have a giant #HoneyPot.
All #Centralized #singlevendor / #SingleProvider solutions are inherently bad from #ITsec, #InfoSec, #OpSec & #ComSec factors alone!
#comsec #opsec #InfoSec #ITSec #SingleProvider #singlevendor #centralized #honeypot #cloudact #cyberfacism #Signal
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social@Seirdy @neurovagrant just use #XMPP over #Tor then...
Also it's not done with "Just use Signal" because #ITsec, #InfoSec, #OpSec & #ComSec are all interlinked.
#Signal is for gullible #TechIlliterates that are too lazy to learn despite being #TechLiterate is part of their job.
Assholes like #GlennGreenwald for example...
Signal will inevitably crash down like #EncroChat and #ANØM before...
#anom #EncroChat #glenngreenwald #techliterate #TechIlliterates #Signal #comsec #opsec #InfoSec #ITSec #Tor #XMPP
Kevin Karhan :verified: · @kkarhan
1319 followers · 91157 posts · Server mstdn.social@neurovagrant no, because #Signal is a #proprietary #SingleVendor / #SingleProvider solition that is subject to #CloudAct and thus can't be secure by design.
If you really want #InfoSec, #OpSec, #ComSec & #ITsec, then #SelfHosting everything is key.
But that'll require #TechLiteracy and may not scale well...
IMHO self-hosting a #Zulip Server works good for organizational structures.
#zulip #techliteracy #SelfHosting #ITSec #comsec #opsec #InfoSec #cloudact #SingleProvider #singlevendor #proprietary #Signal
Kevin Karhan :verified: · @kkarhan
1319 followers · 90688 posts · Server mstdn.socialAlso like any #cellular #radio system, #TETRA devices constantly transmit data, making it trivial to locate and track any radio through passive #SIGINT.
The same way LEAs track peoples' mobile phones.
Likewise this is systemic per design and thus unfixable!
So basically the #OpSec, #InfoSec, #ComSec and thanks to #Windows the #ITsec of LEAs are f**ked and the correct fix is in between "impossible" and "painful to implement over more than a year"...
#ITSec #Windows #comsec #InfoSec #opsec #sigint #tetra #Radio #cellular
Kevin Karhan :verified: · @kkarhan
1316 followers · 89802 posts · Server mstdn.social@FinalOverdrive @schrottkatze @enby_of_the_apocalypse @rechelon I know, but as much of a chaos as has been attributed to #Anonymous, they did some good...
And they did showcase that #TechLiteracy, #MediaLiteracy, #ITsec, #IfoSec, #OpSec & #ComSec are essential...
#comsec #opsec #ifosec #ITSec #medialiteracy #techliteracy #Anonymous
Kevin Karhan :verified: · @kkarhan
1308 followers · 89025 posts · Server mstdn.socialNeedless to say that the non-teaching of #TechLiteracy and #MediaLiteracy including #ITsec, #InfoSec, #OpSec & #ComSec isn't an accident but systemically intended.
Because #TechIlliterate and/or #MediaIlliterate people are easy to control without being less productive in terms of taxable income as complete #Illiterates...
https://mstdn.social/@kkarhan/110752123481585671
#illiterates #mediailliterate #techilliterate #comsec #opsec #InfoSec #ITSec #medialiteracy #techliteracy
Kevin Karhan :verified: · @kkarhan
1293 followers · 87182 posts · Server mstdn.social@generationX awell, you can be private on the internet...
#comsec #opsec #InfoSec #ITSec
Kevin Karhan :verified: · @kkarhan
1271 followers · 84194 posts · Server mstdn.social@Joseph I've to disagree with @deviantollam on that part solely because #Cyberfacism at the U.S. border necessitates said #ITsec, #InfoSec, #OpSec and #ComSec...
Like even if I wanted to enter the #USA [which I don't considering the fact that more and more states try to criminalize the very existance of several of my mutuals and don't get any repercussions for doing so!] I'd certainly not bring any device with me with any data on it!
#USA #comsec #opsec #InfoSec #ITSec #cyberfacism
Kevin Karhan :verified: · @kkarhan
1226 followers · 81024 posts · Server mstdn.social@Anibyl @chris that's because it's a #SingleVendor / #SingleProvider #app and thus inherently insecure.
If your #OpSec, #InfoSec, #ComSec and #ITsec relies on "non-cooperative providers" you'll inevitably be susceptible to using #HoneyPot|s like #ANØM or be targeted by #Govware operations like the one happening with #EncroChat.
re!
#EncroChat #govware #anom #honeypot #ITSec #comsec #InfoSec #opsec #App #SingleProvider #singlevendor
Kevin Karhan :verified: · @kkarhan
1218 followers · 80375 posts · Server mstdn.social
@enno not that surprising given that every #SingleVendor / #SingleProvider "solution" for communications will inherently have #Govware #backdoors, otherwise they'd be illegal!
That's why noone who takes #ITsec, #InfoSec, #OpSec & #comSec 100% seriously will use them for anything but posting public info.
That's how the drug dealers using #EncroChat & #ANØM got caught and why noone should trust any #VPN or #Messenger!
https://www.youtube.com/watch?v=WVDQEoe6ZWY
https://twitter.com/thegrugq/status/1085614812581715968
#messenger #VPN #anom #EncroChat #comsec #opsec #InfoSec #ITSec #backdoors #govware #SingleProvider #singlevendor
Kevin Karhan :verified: · @kkarhan
1218 followers · 80375 posts · Server mstdn.social