Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
sampo (sampo@pleroma.soykaf.com)'s status on Monday, 26-Aug-2024 02:05:32 JST sampo

what's up with durov? I thought his shop was pretty eager about bending the knee. I seem to remember that they at least have a hotline to the german spooks

In conversation about 3 months ago from pleroma.soykaf.com permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:05:30 JST Haelwenn /элвэн/ :triskell:
  in reply to
  
  @sampo French spooks this time, why the heck did he even land in France.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:18:42 JST Haelwenn /элвэн/ :triskell:
  in reply to
  
  @sampo Well, TF1Info (french mass media) says he had at least two search warrants against him (FPR and OFMIN) and likely for a while.
  But even without that french cops can arrest you for a ton of reasons.
  
  In conversation about 3 months ago permalink
- Embed this notice
  sampo (sampo@pleroma.soykaf.com)'s status on Monday, 26-Aug-2024 02:18:43 JST sampo
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan I wonder if they pulled the old "issue a warrant while you're mid air" trick
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:22:11 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @sampo For me the trick part is more how he got french citizenship in 2021, like wouldn't be surprised he got it that to jail him more easily.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:24:06 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com What I don't understand is that it seems to be the things he's being charged for are done by Telegram LLC, and not by him personally.
  
  How does that even work in France?
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:26:42 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - SuperDicq
  @SuperDicq @sampo Via complicity, which is how you also jail non-organised groups.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:27:42 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com So France sees Telegram more like organized crime than a legitimate business entity?
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:30:48 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com I doubt this strategy is effective if your goal is to stop Telegram or change them in any way.
  
  Telegram is a full company with many people working on it. Even if you put Durov in jail I doubt anything is gonna change and Telegram will just continue existing like it does.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:32:40 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - SuperDicq
  @SuperDicq @sampo I don't think the goal is to stop Telegram, at least the charges are against the lack of compliance against the law (including CSAM).
  Which AFAIK Telegram can technically comply with.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:34:34 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com Kinda dumb how anyone can agree with someone being arrested for wanting to protect the privacy of their users and not give up private information to law enforcement agencies.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:34:45 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @SuperDicq @sampo And I see this as more shaking down rather than shutting down, quite like what you had with Pirate Bay Trials where they got stuck to charging some of the members rather than Pirate Bay itself.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:36:14 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - SuperDicq
  @SuperDicq @sampo Well isn't Telegram not even blocking users sharing CSAM?
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:37:18 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com Afaik Telegram doesn't give a fuck and they don't do any sort of server side scanning in groups.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:39:26 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com I actually hate Signal shills so much with their whole "but Telegram encryption sucks".
  
  Yeah well your fucking app doesn't even work without gapps and is not available in fdroid. Telegram is the only "normie-tier" messenger app that I can actually run so your opinion is invalid.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:44:23 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - SuperDicq
  @SuperDicq @sampo Yeah Signal is effectively proprietary in practice.
  And I'd say it's effectively WhatsApp with a former anarchist flair.
  
  In conversation about 3 months ago permalink
  
  Polychrome :blabcat: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:44:25 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com Sure, Telegram isn't perfect. If the protocol was more decentralized they wouldn't have these problems with governments in the first place for example.
  
  I don't trust Telegram to keep my data safe, I am aware a random government can just turn it into a honeypot at any time.
  
  But Telegram is definitely usable for me for casual conversation that doesn't necessarily has to be private E2E encrypted. I don't mind it its existence at all.
  
  The injected ads for non-premium users have gotten quite annoying tho.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  narcolepsy and alcoholism :flag: (hj@shigusegubu.club)'s status on Monday, 26-Aug-2024 02:45:18 JST narcolepsy and alcoholism :flag:
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @lanodan @SuperDicq @sampo both are garbage because they require phone number to use
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:45:23 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com Yeah I really don't trust Signal more than I do WhatsApp. They both constantly scream "trust us" at the user while only providing proprietary software.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:48:25 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - narcolepsy and alcoholism :flag:
  - SuperDicq
  @hj @SuperDicq @sampo Worst than phone number, they require iOS/Google-Android apps.
  
  Use anything than that? No service for you. (With Signal using it as a form of DRM, I don't know for Telegram, haven't looked much at it)
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:49:09 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - narcolepsy and alcoholism :flag:
  @hj@shigusegubu.club @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com Technically you can use Telegram without a phone number now, but it is quite complicated because you have to do it through the TON crypto shitcoin thing. I think buying one of those Telegram only phone numbers is a one time free of 15 euros?
  
  I have a Telegram account with a real phone number. The phone number I used to sign up is not traceable back to me. I don't actually have a phone contract myself.
  
  In conversation about 3 months ago permalink
- Embed this notice
  narcolepsy and alcoholism :flag: (hj@shigusegubu.club)'s status on Monday, 26-Aug-2024 02:49:28 JST narcolepsy and alcoholism :flag:
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @lanodan @SuperDicq @sampo telegram works, but you won't get encrypted chats unless you use macOSX native version becasuse qt version dev has a comically humongous skill issue
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:50:22 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me If they did I think Durov wouldn't have gotten arrested.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  sampo (sampo@pleroma.soykaf.com)'s status on Monday, 26-Aug-2024 02:50:23 JST sampo
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @SuperDicq @lanodan telegram has a data sharing program with the german government, and that's jus the one that was exposed. I wouldn't be surprised if they do the same with the french. they aren't protecting anyone
  
  In conversation about 3 months ago permalink
- Embed this notice
  narcolepsy and alcoholism :flag: (hj@shigusegubu.club)'s status on Monday, 26-Aug-2024 02:51:41 JST narcolepsy and alcoholism :flag:
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @SuperDicq @sampo @lanodan yeah the crypto bullshit is just an unfunny joke and also retarded. I'm not as concerned with phone number tracing as I am concerned with "what happens if i lose/change my phone number, what if someone else gets to use my phone number because i let it unused for too long and provider reused it"
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:52:41 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - narcolepsy and alcoholism :flag:
  @hj@shigusegubu.club @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com I don't care about E2E encryption in Telegram. If I wanted to discuss something that required super private that required encrypted chats I would invite the person to use Jami or Tox or something instead.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:52:59 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - narcolepsy and alcoholism :flag:
  @hj@shigusegubu.club @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com Or you know, just exchange GPG keys...
  
  In conversation about 3 months ago permalink
- Embed this notice
  meso (meso@the.asbestos.cafe)'s status on Monday, 26-Aug-2024 02:53:21 JST meso
  in reply to
  @SuperDicq @hj @sampo @lanodan i consider all my conversations private apart from ones on fedi, i dont see why it's normalized for them to not be private on platforms like telegram
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:53:48 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - narcolepsy and alcoholism :flag:
  - SuperDicq
  @hj @SuperDicq @sampo And phone number re-attribution was used against Signal users few times, meaning it's not a thing you can really use with a burner phone, the irony.
  
  In conversation about 3 months ago permalink
- Embed this notice
  narcolepsy and alcoholism :flag: (hj@shigusegubu.club)'s status on Monday, 26-Aug-2024 02:53:57 JST narcolepsy and alcoholism :flag:
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @SuperDicq @sampo @lanodan yeah but point is that qt version just behaves like encrypted chats don't exist on the service, no "unable to decrypt message" or anything, ppl can send you encrypted messages and you won't even know that they did.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:55:05 JST SuperDicq
  in reply to
  @meso@the.asbestos.cafe @hj@shigusegubu.club @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me I mean yes I agree it should technically all be private.
  
  But honestly I'm not lying awake at night knowing that the government might know that I sent my mother a "happy birthday" message on Telegram... Definitely beats trying to explain to her how GPG works (never gonna happen).
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:55:46 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - narcolepsy and alcoholism :flag:
  - SuperDicq
  @SuperDicq @hj @sampo So far I've just went with face-to-face meetings, because that's less of a hassle than E2EE setups.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:56:30 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - narcolepsy and alcoholism :flag:
  - SuperDicq
  @hj @SuperDicq @sampo Ah, the matrix native (non-electron) clients experience.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 02:56:44 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - narcolepsy and alcoholism :flag:
  @lanodan@queer.hacktivis.me @hj@shigusegubu.club @sampo@pleroma.soykaf.com Of course discussing things face to face is the best, but you can't always do that especially with people who do not live near you.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 02:59:36 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - narcolepsy and alcoholism :flag:
  - SuperDicq
  @SuperDicq @hj @sampo Yeah, but so far for this case, TLS (and most if not all of us being self-hosted) is enough of a security.
  
  In conversation about 3 months ago permalink
- Embed this notice
  sampo (sampo@pleroma.soykaf.com)'s status on Monday, 26-Aug-2024 03:00:32 JST sampo
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @SuperDicq @lanodan hence my confusion at this whole affair in the OP. he's a little goody two shoes just like moxie and all the rest, does not pass the vibe check.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:01:07 JST SuperDicq
  in reply to
  @meso@the.asbestos.cafe @hj@shigusegubu.club @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me I am not of the opinion that the highest possible security methods must always be enforced.
  
  Like I believe that Telegram is adequate for every day non-incriminating messaging with normies, especially considering the alternatives (WhatsApp, Signal, etc.).
  
  If you're one of those people that uses Telegram to buy drugs or something like you're just really stupid and you should learn how to use DNMs with Tor Browser, Monero and PGP instead.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:03:10 JST SuperDicq
  in reply to
  @meso@the.asbestos.cafe @hj@shigusegubu.club @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me I will very gladly explain to anyone how to safely break laws on the internet 👍
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 03:04:31 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @SuperDicq @hj @sampo @meso Yeah, I'd agree, that said pretty good security should at least be within casual reach.
  Because as good as software can be, the biggest flaw is the user and a good way of reducing that is being at least somewhat familiar with the software.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:09:51 JST SuperDicq
  in reply to
  @lanodan@queer.hacktivis.me @hj@shigusegubu.club @sampo@pleroma.soykaf.com @meso@the.asbestos.cafe Good security will never be within casual reach.
  
  There is always an inherent trade-off between security and convenience.
  
  Especially with the average attention span nowadays being so low that the average person already gives when they see the fediverse "What do you mean I have to choose an instance? That sounds like work!".
  
  It is impossible to design fully decentralized and fully E2E messenger with the same convenience of a centralized one.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:10:52 JST SuperDicq
  in reply to
  @rakoo@blah.rako.space @lanodan@queer.hacktivis.me @sampo@pleroma.soykaf.com @hj@shigusegubu.club This version is still not fdroid, I haven't looked up the reason why, but I will probably trust the fdroid team on this.
  
  In conversation about 3 months ago permalink
- Embed this notice
  rakoo (rakoo@blah.rako.space)'s status on Monday, 26-Aug-2024 03:10:58 JST rakoo
  in reply to
  @lanodan
  
  No, signal has a google-less version on their website. Not easy to find and thus not telegram-easy, but it does exist
  @SuperDicq @sampo @hj
  
  In conversation about 3 months ago permalink
- Embed this notice
  Sally (sally@shitposter.world)'s status on Monday, 26-Aug-2024 03:11:54 JST Sally
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @SuperDicq
  @sampo @lanodan
  
  > Yeah well your fucking app doesn't even work without gapps and is not available in fdroid.
  
  Telegram is on FDroid and arguably shouldn't tbh.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:11:54 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - Sally
  @sally@shitposter.world @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me Why shouldn't it? It has all the necessary and applicable anti-feature warnings.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:15:16 JST SuperDicq
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - Sally
  @sally@shitposter.world @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me I don't see how it breaks freedom 0.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Sally (sally@shitposter.world)'s status on Monday, 26-Aug-2024 03:15:17 JST Sally
  in reply to
  - Haelwenn /элвэн/ :triskell:
  - SuperDicq
  @SuperDicq
  @sampo @lanodan
  
  Because it's proprietary.
  
  No other app gets the same treatment on FDroid as Telegram does.
  
  And before you start quoting the GPL license on their repos, I had this exact same discussion with some clown like one or two weeks ago, the clients break freedom 0, the license is void, Telegram is absolutely proprietary.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:17:06 JST SuperDicq
  in reply to
  @sally@shitposter.world @hj@shigusegubu.club @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me I am shilling GPG in the same thread.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Sally (sally@shitposter.world)'s status on Monday, 26-Aug-2024 03:17:07 JST Sally
  in reply to
  @SuperDicq
  @hj @sampo @lanodan
  
  People should shill GPG more often on Fedi, it's the best tool people has against government and corporate surveillance.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 03:17:47 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @SuperDicq @hj @sampo @meso Nah, good security includes the usability in the equation.
  Although I'd do a strong difference between convenience (or even gamified experiences) and usability.
  
  And sadly cryptonerds are nerds, so when cryptography moved to software, they tossed out the user part as too hard because they're not designers but developers at best and we lost centuries of hindsight in the process.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 03:20:55 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @sally @SuperDicq @sampo @hj OpenPGP literally means all your messages are cryptographically signed with a keypair so eternal you've likely copied it across several machines (and very likely one without any disk encryption).
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:26:15 JST SuperDicq
  in reply to
  @lanodan@queer.hacktivis.me @sally@shitposter.world @sampo@pleroma.soykaf.com @hj@shigusegubu.club If you think a GPG key is compromised simply because it exists on a computer without disk encryption you fundamentally do not understand GPG.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 03:27:36 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @sally @SuperDicq @hj @sampo Which is quite why the only thing where OpenPGP got some adoption is Usenet control messages, debian packages and release tarballs.
  So things which are very public and typically even tied to a government ID (see keysigning parties).
  
  Then once in a while some nerds try to use OpenPGP for things like NDAs and it's a disaster.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 03:28:46 JST SuperDicq
  in reply to
  @lanodan@queer.hacktivis.me @sally@shitposter.world @hj@shigusegubu.club @sampo@pleroma.soykaf.com You're talking about digital signatures, not encryption itself like we are.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 03:30:47 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @SuperDicq @hj @sampo @sally Because basically no one uses the encryption side of it.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Sally (sally@shitposter.world)'s status on Monday, 26-Aug-2024 03:37:57 JST Sally
  in reply to
  @lanodan @SuperDicq @sampo @hj
  
  You can set expire date when making them, if you're lazy on keeping your opsec properly it's your fault, not on the encryption standard.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 03:37:57 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @sally @SuperDicq @sampo @hj Expiration is kind of a joke, most people will just bump the date on the same subkey because if you use another subkey then you get subject to the mess that are keyservers.
  
  And the identify keypair can't get rotated easily, hence why people just keep those for decades.
  
  And a government or a corp wanting to break an OpenPGP keypair could just rent an ASIC-based machine for a bit (they're costy to buy sure but rent makes those things much cheaper).
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 03:49:04 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @SuperDicq @hj @sampo @sally It means you've reduced the security of your private key from fingerprint/public key to your passphrase, which if you don't have disk encryption… will just get keylogged.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 04:33:49 JST SuperDicq
  in reply to
  @lanodan@queer.hacktivis.me @sally@shitposter.world @hj@shigusegubu.club @sampo@pleroma.soykaf.com Knowing if the person on the other side is really the person they are saying they are is a completely different security issue to solve than private messaging.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 04:34:48 JST SuperDicq
  in reply to
  @rakoo@blah.rako.space @hj@shigusegubu.club @sampo@pleroma.soykaf.com @lanodan@queer.hacktivis.me If Signal truly cared about being safe reproducible builds should be their absolute top priority.
  
  In conversation about 3 months ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  rakoo (rakoo@blah.rako.space)'s status on Monday, 26-Aug-2024 04:34:50 JST rakoo
  in reply to
  @SuperDicq
  
  As I remember it, Signal doesn't trust third-parties to compile a proper version (more precisely, they don't trust third-parties to not oe compromised when the adversary is a nation-state, and I'd belieâe them).
  
  They've been working on reprodocible builds but I understano it's not their priority
  @hj @sampo @lanodan
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 04:35:45 JST SuperDicq
  in reply to
  @lanodan@queer.hacktivis.me @hj@shigusegubu.club @sampo@pleroma.soykaf.com @sally@shitposter.world That's not true. Everyone who actually has something to hide uses GPG.
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 04:36:46 JST SuperDicq
  in reply to
  @lanodan@queer.hacktivis.me @hj@shigusegubu.club @sampo@pleroma.soykaf.com @sally@shitposter.world What the hell does keylogging have to do with disk encryption? Are you just throwing buzzwords at the wall?
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 04:37:04 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @SuperDicq @hj @sampo @rakoo And arguably should have been solved ages ago, at least AFAIK Tails just does for the entirety of it.
  
  In conversation about 3 months ago permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 26-Aug-2024 04:40:10 JST Haelwenn /элвэн/ :triskell:
  in reply to
  @SuperDicq @hj @sampo @sally You can't add arbitrary files to an encrypted disk (the system one).
  
  In conversation about 3 months ago permalink
- Embed this notice
  SuperDicq (superdicq@minidisc.tokyo)'s status on Monday, 26-Aug-2024 04:47:40 JST SuperDicq
  in reply to
  @lanodan@queer.hacktivis.me @hj@shigusegubu.club @sampo@pleroma.soykaf.com @sally@shitposter.world Disk encryption only protects you from attackers that have physical access to your machine.
  
  Personally I do not encrypt the hard drives of my computers that do not leave my house, nobody but me has access to these machines so why bother setting it up? The only devices I have disk encryption on are my laptop and phone, because they can get stolen or lost.
  
  In conversation about 3 months ago permalink

Feeds