☆ Yσɠƚԋσʂ ☆

@ yogthos @lemmy.ml

Posts

8073
Comments

8074
Joined

6 yr. ago

Moderating

United States | News & Politics lemmy.ml

Comics lemmy.ml

Lisp Community lemmy.ml

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app
Jump
3

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago
Session actually does implement a form of forward secrecy through the Session Protocol. https://getsession.org/blog/session-protocol-v2

5d ago

Living in western society

Money is not fake, it’s arbitrary.

While distinction between fictitious and arbitrary is technically correct, it's just pedantry which misses the actual point of the colloquialism. It's not that it doesn’t serve an exchange function, or that the dollars in your account are somehow illusory. It's an expression of frustration with how we have chosen as a society to treat economic institutions being treated as laws of nature, rather than as social construct which we ourselves have invented and therefore can revise at any time. As in much public discourse, the statement is a rebuke to the widespread habit of treating financial constraints as absolute barriers, beyond which no serious thought need be expended, and as an excuse for avoiding responsibility to address the underlying human issues. Correcting their metaphors ignores their argument. If the rules that govern human wealth are entirely of our own making, they can also be systematically changed whenever those rules no longer serve our common good.

Food is not being poisoned, what a crock of shit.

Meanwhile in the real world, there's literally a lawsuit against companies knowingly designing, marketing, and selling food products that are harmful and addictive.

Going on about how it’s being poisoned makes you sound anti-science or like someone trying to scare people into watching their paid content.

Again back in the real world, the history of US water pollution is unfortunately marked by numerous instances where industrial discharge, coupled with weak or failed regulation, has poisoned water supplies. Just a few examples which you could've trivially googled yourself

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

You have to trust the people that wrote the code.

There's a big difference between having confidence in open source code that has been audited by many people, and knowing for a fact that the service collects specific information. In the former case, you can never be absolutely sure that the code is not malicious so there is always a risk, but in the latter case you know for a fact that the service is collecting inappropriate information and you have to trust that people operating the service are not using it in adversarial ways. These two scenarios are in no way equivalent.

Which is fine, but it’s a choice to trust them.

It's a choice to trust the entire open source community around the project and all the security researchers who have been looking at the code.

Frankly, I have trouble believing that you don't understand the difference here and are making your argument in good faith.

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

oh here https://www.washingtonpost.com/technology/2021/06/15/faq-data-subpoena-investigation/

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

There are plenty of good enough options like SimpleX Chat out there that don't have this problem. The whole argument that people should just ignore the obvious issue with Signal is frankly weird.

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

You don't have to trust anybody when you run your own server, or you use a server that doesn't collect information it has no business collecting.

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

There’s no such social graph to speak of. Signal does not know who is speaking to whom.

The only people who know this are people operating the server. Period.

Three-letter agencies have served them legal subpoenas many many times and they never turn over anything more than the above information.

See the link I provided above.

Filter for…what, exactly? The hundreds of millions of people who value private and secure communications?

Yup, that's precisely what it's a filter for.

We do, because they publish them publicly.

Trust me bro is not a viable model for anybody who actually gives a shit about their privacy.

The reality of the situation is that Signal asks users for information it has no business collecting during the sign up process, and this information can be used in adversarial ways against the users. People using Signal are making a faith based judgment to trust the operators of this server.

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

The problem is that you just have to trust them because only people who actually operate the server know what they do or do not store. Trust me bro, is not a viable security model. As a rule, you have to assume that any info an app collects, such as your phone number, can now be used in adversarial fashion against you.

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

yeah it definitely has some promise

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

It's better than Signal since you don't have to disclose any personal info, but people have pointed out some issues with federation in it. Again, it's one of those things that may or may not matter based on your use case.

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

Yeah, I'm leery about anything where vcs are involved as well for obvious reasons. The tech itself does seem solid though, and it is open source. If it does start moving in a sketchy direction at least it could be forked at that point.

5d ago

Trump, seeking executive power over elections, is urged to declare emergency

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

Oh look, my stalker is now making low key personal threats.

5d ago

Trump, seeking executive power over elections, is urged to declare emergency

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

The fact that you felt the need to try and stalk a random person online shows what a creep you are. Meanwhile, I love how you continue to prove that you don't understand what being a liberal actually means. Maybe spend more time actually understanding subjects you attempt to debate online instead of stalking people you disagree with. But maybe being a creep is your whole identity.

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

It really depends on your needs and what people you communicate with are willing to use. A few platforms that are notable in no particular order.

SimpleX Chat is probably the gold standard right now. It uses absolutely no user IDs such as phone numbers, no usernames, no random strings of text. Instead, it creates unique, pairwise decentralized message queues for every single contact you have. Because there is no global identity, there is no metadata connecting your conversations together.

Session is a popular Signal alternative. It doesn't require a phone number and routes your messages through an onion-routed decentralized network that's similar to Tor. Since your IP address is hidden and messages are bounced through multiple nodes, no single server ever knows who is talking to whom, stripping away metadata.

Jami is completely decentralized, open-source platform. It uses Distributed Hash Tables to connect users directly to one another without a central server. Notably, it supports high-quality voice and video calls.

5d ago

Trump, seeking executive power over elections, is urged to declare emergency

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

I love how you think you know my entire life. I guess being delusional is part of the package with being a liberal. I do love how I have my very own internet stalker now. What's it like being a creep?

5d ago

Trump, seeking executive power over elections, is urged to declare emergency

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

Ah yes, living in a particular place makes you a liberal. I'm dealing with a true intellectual here. 🤣

5d ago

Trump, seeking executive power over elections, is urged to declare emergency

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

at least I'm not a cringe lib

5d ago

Signal Founder Moxie Marlinspike: Telegram is not private. There is nothing private about it. They've done a really amazing job of convincing the world that this is an encrypted messaging app

Jump

121

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

It's also important to continue educating people about the fact that Signal is incredibly problematic as well, but not in the way most people think.

The issue with Signal is that your phone number is metadata. And people who think metadata is "just" data or that cross-referencing is some kind of sci-fi nonsense, are fundamentally misunderstanding how modern surveillance works.

By requiring phone numbers, Signal, despite its good encryption, inherently builds a social graph. The server operators, or anyone who gets that data, can see a map of who is talking to whom. The content is secure, but the connections are not.

Being able to map out who talks to whom is incredibly valuable. A three-letter agency can take the map of connections and overlay it with all the other data they vacuum up from other sources, such as location data, purchase histories, social media activity. If you become a "person of interest" for any reason, they instantly have your entire social circle mapped out.

Worse, the act of seeking out encrypted communication is itself a red flag. It's a perfect filter: "Show me everyone paranoid enough to use crypto." You're basically raising your hand.

So, in a twisted way, Signal being a tool for private conversations, makes it a perfect machine for mapping associations and identifying targets. The fact that Signal is operated centrally with the server located in the US, and it's being developed by people with connections to US intelligence while being constantly pushed as the best solution for private communication should give everyone a pause.

The kicker is that thanks to gag orders, companies are legally forbidden from telling you if the feds come knocking for this data. So even if Signal's intentions are pure, we'd never know how the data it collects is being used. The potential for abuse is baked right into the phone-number requirement.

5d ago

"Taiwan Independence" is a lie

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

5d ago

Trump, seeking executive power over elections, is urged to declare emergency

Jump

☆ Yσɠƚԋσʂ ☆ @lemmy.ml 5d ago

Thinking that it's about any single individual like Trump or Vance shows profound lack of understanding of how the system actually works on your part. If it's not them, then it will be somebody else like them because the selection pressures that put them there are still going to be present. Liberals consistently fail to understand the concept of systemic pressures and are prone to clutching to the great man fallacy thinking that Trump is the one responsible for all the evils, and if he could only be removed from power somehow everything would go back to the way it was before.

The fact that this needed to be spelled out for you is frankly incredible.