Kevin Karhan :verified: · @kkarhan
1488 followers · 108023 posts · Server mstdn.social@Pabamiti @Natanox @nomain @netzpolitik_feed Und selbst #Threema ist wegen der Zentralisierung unsicher, weil da reicht es einfach den Traffic zu deren Systemen aufzuzeichnen ..
Nur kompett dezentralisierte Systeme die komplett #SelfHosting-fähig sind (#eMail mit PGP/MIME & #XMPP-#OMEMO) können sicher sein, wenn diese korrekt aufgesetzt und konfiguriert sind - bei allen Beteiligten.
#omemo #XMPP #Email #SelfHosting #Threema
el lobi · @lobi
92 followers · 658 posts · Server todon.nl
Kevin Karhan :verified: · @kkarhan
1411 followers · 98862 posts · Server mstdn.socialAll shit that #monoclesChat or any other #XMPP+#OMEMO or #PGP/MIME - compatible client just doesn't do.
@signalapp in my eyes is at best begging to be infiltrated like #EncroChat if not outright a #HoneyPot like #ANØM!
DON'T USE IT!
DON'T ADVOCATE FOR IT!
TELL OTHERS TO DO THE SAME!
https://mstdn.social/@kkarhan/110864976153746039
#anom #honeypot #EncroChat #pgp #omemo #XMPP #monocleschat
Kevin Karhan :verified: · @kkarhan
1411 followers · 98864 posts · Server mstdn.social@jz also @signalapp 's #Centralization and #DataCollection as well as #Capability to enforce #Sanctions (as they collect #PhoneNumber|s) is inherently bad.
#omemo #XMPP #phonenumber #sanctions #capability #datacollection #centralization
📡(RTP) Privacy & Tech Tips · @RTP
3647 followers · 4992 posts · Server fosstodon.orgDon't Submit Personal Calls / Data / Biometrics To AI Training (Empowering Abuse Potential, Disempowering End Users) For Video Calls
AI Training Can Also Be A Fancy Way Of Saying "Putting You Under Surveillance"
Instead, Use Signal / Session / XMPP + PGP / OMEMO / Jitsi
#News #Zoom #videocall #AI #ArtificialIntelligence #privacy #biometrics #surveillance #Signal #Session #security #infosec #cybersecurity #OMEMO #Jitsi #XMPP #PGP
https://stackdiary.com/zoom-terms-now-allow-training-ai-on-user-content-with-no-opt-out/
#news #zoom #videocall #ai #artificialintelligence #privacy #biometrics #surveillance #signal #session #security #infosec #cybersecurity #omemo #jitsi #xmpp #pgp
Josh · @josh
13 followers · 27 posts · Server hacktheplanet.com.au
Debacle · @debacle
402 followers · 54 posts · Server framapiaf.org#Profanity 0.14.0 is now in #Debian unstable!
Profanity is a console #Jabber client, with support for #MAM, #OMEMO, #OX (#OpenPGP for #XMPP) and more.
Release notes: https://github.com/profanity-im/profanity/releases/tag/0.14.0
#xmpp #openpgp #ox #omemo #mam #jabber #debian #profanity
Kevin Karhan :verified: · @kkarhan
1344 followers · 93446 posts · Server mstdn.social1. Alle #Datenträger vollverschlüsseln!
2. Keine #Backdoor|ed #Govware nutzen [#Windows, #macOS].
3. Alle #Kommunikation korrekt Ende-zu-Ende verschlüsseln [PGP/MIME für #eMail & #XMPP - #OMEMO für #Chats]
4. Sichere Passwürter nutzen!
5. Passwordmanager nutzen um sichere Passwörter zu sichern!
Das ist so simpel dass ich das bei diversen #TechIlliterates deployed hab mit 5-15min Einarbeitung der User*innen.
#TechIlliterates #chats #omemo #XMPP #Email #kommunikation #macOS #Windows #govware #backdoor #datentrager
Kevin Karhan :verified: · @kkarhan
1337 followers · 92578 posts · Server mstdn.social@roywig @thatandromeda @leak it is "good enough", cuz we ain't 15 years ago where eberything needed archaic commands.
#Thunderbird integrates #OpenPGP / #GnuPG out of the box for some time.
#Gaijim & #MonoclesChat do support #XMPP - #OMEMO and #PasswordManagers like #Enpass are so easy, it literally took me 5 minutes to explain the use and setup a complete #Noob in it.
People aren't stupid, they are lazy and get groomed into being #TechIlliterate #Consoomers...
That is the problem!
#consoomers #techilliterate #noob #Enpass #passwordmanagers #omemo #XMPP #monocleschat #Gaijim #gnupg #openpgp #Thunderbird
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social@neurovagrant @iatendril @Seirdy @vamanimal @itzzenxx
Very simple: Whilst there are very large Servers for #XMPP and #eMail, it's not as if there's only one provider for each...
Unlike say @signalapp which is as centralized as #MicrosoftTeams, #Slack, #Zoom and #WhatsApp...
With XMPP - #OMEMO and #PGP/MIME you own the keys and have 100% self-custody, so on proper #E2EE you are in control.
You can decide whom to trust and whom not.
You can do #KeyExchange the way you see fit & verify them.
#keyexchange #e2ee #pgp #omemo #WhatsApp #Zoom #Slack #MicrosoftTeams #Email #XMPP
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social@itzzenxx @Seirdy @vamanimal @neurovagrant OFC, but what do you think scales easier?
Tracking down @signalapp users or having to literally check every connection if it's #XMPP-#OMEMO and even then it would be trivial to just start a new server or move it onto #Tor / behind a #VPN or otherwise make it indistinguishable and unblockable.
It's like trying to ban #eMail vs. #GMail...
Again: Users get identified by making single HTTP(S) requests daily.
#Gmail #Email #VPN #Tor #omemo #XMPP
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social@neurovagrant @fla @Seirdy Relying on a #centralized #SingleVendor / #singleProvider solution like @signalapp / #Signal is even more dangerously naive as equally centralized solutions like #EncroChat or #ANØM:
Or do you naively believe governments that strictly enforce #LawfulInterception will just not care because it's #Signal?
Hell no!
There's a reason #XMPP - #OMEMO and other protocols where users own the keys are still around: Because they work and ain't Single-Vendor/Single-Provider!
#omemo #XMPP #LawfulInterception #anom #EncroChat #Signal #SingleProvider #singlevendor #centralized
Kevin Karhan :verified: · @kkarhan
1319 followers · 91237 posts · Server mstdn.social@Seirdy @neurovagrant that is irrelevant for the problem.
If I were to control a PBX, then encrypting your calls only buys your time at best if not allow me to literally MITM stuff since, #NotYourKeysNotYourControl!
Whereas I can exchange keys in #PGP / #MIME and #XMPP - #OMEMO via other ways and actually verify shit instead if #TOFU!
#tofu #omemo #XMPP #mime #pgp #notyourkeysnotyourcontrol
Kevin Karhan :verified: · @kkarhan
1308 followers · 89025 posts · Server mstdn.social#Thunderbird integrates #OpenPGP now natively and you can with a few clicks setup PGP/MIME and it does work automagically in the background.
https://support.mozilla.org/en-US/kb/openpgp-thunderbird-howto-and-faq
Same with #XMPP + #OMEMO: Gajim and #MonoclesChat make it basically #IdiotProof!
https://gajim.org/
https://f-droid.org/packages/de.monocles.chat/
#idiotproof #monocleschat #omemo #XMPP #openpgp #Thunderbird
Kevin Karhan :verified: · @kkarhan
1308 followers · 89025 posts · Server mstdn.social@androcat @JorisMeys Actually, I would've accepted that argument years ago when there were no good #XMPP + #OMEMO clients and you needed to fiddle with #Enigmail on #Thunderbird.
But this isn't the case in 2023 anymore...
https://mstdn.social/@kkarhan/110752069759072579
#Thunderbird #enigmail #omemo #XMPP
Kevin Karhan :verified: · @kkarhan
1308 followers · 89028 posts · Server mstdn.social
@JorisMeys Differnt brand - same issue.
Whilst #Signal has yet to be confirmed as #PRISM collaborator, it too is a #centralized & #proprietary #SingleVendor / #SinlgeProvider "solution" and thus inevitably susceptible to state-sponsored attacks and easy to force into compliance with facist demands.
You might as well use #EncroChat or #ANØM instead.
https://twitter.com/thegrugq/status/1085614812581715968
Real professionals will use #XMPP - #OMEMO as #decentralized, #OpenSource and thus inherently more resilient option!
#OpenSource #decentralized #omemo #XMPP #anom #EncroChat #sinlgeprovider #singlevendor #proprietary #centralized #prism #Signal
Kevin Karhan :verified: · @kkarhan
1298 followers · 87886 posts · Server mstdn.social@heiseonline Meiner Erfahrung nach ist #XMPP - #OMEMO allerdings schneller, stabiler und sicherer!
Tigase · @tigase
390 followers · 69 posts · Server fosstodon.org
Would you like to keep your conversations private in the #BeagleIM app for #Apple #macOS? You can achieve this by enabling #OMEMO end-to-end encryption! By enabling OMEMO end-to-end encryption, you can ensure that your conversations remain completely private and secure. OMEMO encryption employs state-of-the-art cryptographic algorithms to protect your messages from being intercepted or accessed by unauthorized parties.
#beagleim #apple #macos #omemo
Kevin Karhan :verified: · @kkarhan
1266 followers · 83707 posts · Server mstdn.social
Kevin Karhan :verified: · @kkarhan
1226 followers · 81024 posts · Server mstdn.social
If you need secure 1:1 chat, #XMPP-#OMEMO is the way to go. You could even use something like #DeltaChat which is based on PGP/MIME-eMail and allows you to keep stuff #E2EE - encrypted yet also save a history which you'll get sync'd across devices.
https://f-droid.org/packages/com.b44t.messenger/
Remember: #NotYourKeys = #NotYourControl = #NotSecure!
#notSecure #notyourcontrol #notyourkeys #e2ee #DeltaChat #omemo #XMPP