dice.camp is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon server for RPG folks to hang out and talk. Not owned by a billionaire.

Administered by:

Server stats:

1.6K
active users

#CryptoAG

0 posts0 participants0 posts today
Replied in thread

@dalias @lauren
@pixelschubsi

Also the blatant dismissal of absolitely basic #OpSec & #ComSec is just flabberghasting.

Only #decentralized, #OpenSource & #OpenStandards can actuall survive long-term and remain #secure.

It's the same reasons we use #PGPG/MIME & #SSH and not #X400 & #X25!

IOW: Think "How can you weaponize Signal?" and see what you csn do just holding key people in contempt...

The less #info a provider has, the less they can be forced to snitch upon customers.

"#JustUseSgnal!" is a form of dangerous "#TechPopulism" aimed at bamboozling #TechIlliterates who don't know better, abusing information asymetry to pull rank instead of investing the time and effort to *explain "how" and "why" this is indeed a good or bad idea.

The only ones that have a chance to beat that are @delta / #deltaChat but that's just #PGP/MIME #eMail in a nice UI...

  • You may now laugh at me and think my "#TinfoilHat sits too tight" but I'm shure sooner or later I'll be evidenced as correct...
Hachyderm.ioCassandrich (@dalias@hachyderm.io)@kkarhan@infosec.space @signalapp@mastodon.world @monocles@monocles.social @lauren@mastodon.laurenweinstein.org Very few systems promoted as Signal alternatives match the cryptographic privacy properties (see: ratcheting, etc.) of Signal. The claims about "located in the USA" and "Cloud Act" are all nonsense because the only threat to Signal users from this is availability (seizure and shutdown of the server infrastructure), not undetected breakage of privacy properties. There are presently no systems with superior privacy properties to Signal *and* level of functionality on par with what general public expects. There are a lot (like the XMPP stuff, *sigh*, and Matrix) that are worse in both regards. If you're happy with reduced functionality, Cwtch (and possibly some other similar Tor-based systems) or VeilidChat are stronger, but it's gonna be a while before you convince normies to use them, and in the mean time they're still going to be on insecure shit like WhatsApp, FB Messenger, Telegram, etc...
Replied in thread

@zdl @evacide that any the fact that @signalapp is incorportated in the #USA, making them susceptible to #GDPR & #BDSG-incompatible #cyberfacist bs like #CloudAct.

Remember: #KYC IS THE ILLICIT ACTIVITY when it comes to #Communication!

Compare that to @monocles / #monoclesChat which don't demand any PII or KYC and allow people to pay for their services with #Monero and #CashByMail besides #SEPA #WireTransfer, #Stripe & #PayPal whilst supporting both decentralization (#XMPP is not a #SingleVendor / #SingleProvider solution!), implementing real #SelfCustody (#OMEMO, #OTR & #PGP is supported out of the box) for all the keys, and proper #Anonymitiy (using @torproject / #Tor & @guardianproject #Orbot for #privacy), so in case they ever get a duely sumitted warrant by a court they'd have to comply with, they'll most likely have no data whatsoever on clients that could allow identification.

  • And that is a good thing, because whilst very unlikely, one cannot exclude the non-zero chance of i.e. #MLAT|s being filed with knowingly false information by 3rd countries.

Also having no PII is a matter of reducing #liabiluty in the sense of #DataProtection: All data requested and by #monocles is the bare minimum mandated for #accounting...

Replied in thread

@GrapheneOS @signalapp only time will tell, but right now I've been correct about #CryptoAG, #LavaBit, #EncroChat, #ANØM, etc.

So farewell...

Infosec.SpaceKevin Karhan :verified: (@kkarhan@infosec.space)@GrapheneOS@grapheneos.social It doesn't change the fact that #security requires #transparency and thus full access & reproduceability from source. To give you a good example, *source-available* #Tarsnap demonstrates that stuff is truly securely encrypted by enabling #SelfCustody of keys *and* thus show they can't decrypt anything! - You may call me paranoid, but having *'massive trust issues'* saved not only my own life more often than I'd be able to disclose so you may see this as a 'survivorship bias', but we'll only see #MassSurveillance becoming impossible when people ain't just *users* of some big-ass platform that can be easily targeted once it becomes *inconvenient* for it's host nation, but actually push for #decentralization and #TechLiteracy. *"Just use A, B, C & D, E, F"* is the real threat as it sugfests people a [false sense if security]( https://grapheneos.social/@GrapheneOS/113047066349052609 ). - Just like a dresh #TechInspection doesn't prevent one to hose an engine due to lack of oil! Collecting any #PII [*IS the illicit activity*]( https://grapheneos.social/@GrapheneOS/113047045993549018 ) NO MATTER the excuse... - You may [choose ignorance]( https://grapheneos.social/@GrapheneOS/113047083361853248 ) but like with #LavaBit, #EncroChat & #ANØM I tend to turn out to be right all along. Sooner or later the #Enshittification of #Signal will reach a point where you'd rethink and consider apologizing...
Replied in thread

@Mer__edith @echo_pbreyer then why does @signalapp not follow through on it's actions and cease operations not only in #cyberfacist regimes like #Russia and #Iran but also relocate out.of range of #CloudAct and completely #decentralize to the point it's not possible to shutdown?

  • Why does #Signal still insist on collecting #PII like #PhoneNumbers which more often than not can't be acquired anonymously in an increasing amount of juristictions?

These questions remain unanswered, because Signal, like #ANØM and #CryptoAG before is a #Honeypot.

  • Otherwise it would've been shutdown and not include concessions that enforce U.S. hegemony and sanctions!

infosec.space/@kkarhan/1125524

Infosec.SpaceKevin Karhan :verified: (@kkarhan@infosec.space)@leitmedium@tldr.nettime.org ich halte das für Geschwätz seitens @signalapp@mastodon.world und @Mer__edith@mastodon.world im speziellen, weil die sich bisher *nirgendwo* zurückgezogen haben. - #Signal ist bestenfalls auf dem *"#TrustMeBro!"*-Level von #EncroChat und wahrscheinlich ein gigantischer #Honeypot alla #ANØM weil die nicht nur ein #zentralisiert|er #SingleVendor & #SingleProvider - Messenger sind, sondern #PII wie #Telefonnummern erfassen und speichern. Ich garantiere dir dass wenn mit Beugehaft bedroht jede*r bei Signal deren User doxxed - so wie's [VPN-Anbieter taten und tun]( https://web.archive.org/web/20220112020000/https://twitter.com/thegrugq/status/1085614812581715968 ). - Aber das ist [nicht meine Meinung]( http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/084b1e1084343fc37c4e/#c-228d7ba7660c592e5a ) sondern #UnbequemeWahrheit... Wenn Signal wirklich auf #Sicherheit und #Privatsphäre fokussiert wäre, dann hätten diese einfach nen #XMPP + #OMEMO - Server im @torproject@mastodon.social / #Tor - Netzwerk aufgezogen und auch das gesamte #Backend #dezentralisiert! - Wäre Signal so sicher wie diese behaupten, dann wäre der Dienst qua #CloudAct lange verboten und das Personal in Haft!
Replied in thread

@ahriboy Unlike @torproject which is sufficiently decentralized that people from the #TorProject can't shutdown #OnionServices [otherwise they would've been forced at gunpoint several times already], #ProtonMail stinks #Honeypot like #CryptoAG did since The Causa Bühler...

In fact @protonmail snitches on users constantly and I'd also not trust @Tutanota in that sense.
youtube.com/watch?v=QCx_G_R0Um

Remember: #notYourKeys = #NotYourControl = no effective #E2EE beyond #SSL & #TLS transport encryption!