🌈 Social 📸 Photography 🌈

Kevin Karhan :verified:<a href="https://hachyderm.io/@Adorable_Sergal" class="u-url mention" rel="nofollow noopener" target="_blank">@Adorable_Sergal</a> yes and no."P.R" <a href="https://infosec.space/tags/China" class="mention hashtag" rel="nofollow noopener" target="_blank">#China</a> got it's industrialization kickstarted by a democidal dictator and only opened up when it was already a production powerhouse.<ul><li>The <a href="https://infosec.space/tags/USA" class="mention hashtag" rel="nofollow noopener" target="_blank">#USA</a> by contrast relies heavily on relatively unhindered exports and imports, espechally digital and payment services.</li></ul>Going full <a href="https://infosec.space/tags/NorthKorea" class="mention hashtag" rel="nofollow noopener" target="_blank">#NorthKorea</a> or even <a href="https://infosec.space/tags/China" class="mention hashtag" rel="nofollow noopener" target="_blank">#China</a> would destroy this source of income for the <a href="https://infosec.space/tags/Trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#Trump</a>-Regime and even Trump himself ain't gonna decapitate himself that way...<ul><li>Given the <a href="https://infosec.space/tags/Cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacist</a> hegemony of the USA it needs the veneer of being trustworthy and somewhat working, and Trump is destroying that in record time.</li></ul>Already there's a <a href="https://infosec.space/tags/BrainDrain" class="mention hashtag" rel="nofollow noopener" target="_blank">#BrainDrain</a> because those who can fled long ago.

Kevin Karhan :verified:<a href="https://flipboard.com/@thenewsdesk" class="u-url mention" rel="nofollow noopener" target="_blank">@thenewsdesk</a> <a href="https://flipboard.com/@thenewsdesk/top-stories-in-business-fagf35eez" class="u-url mention" rel="nofollow noopener" target="_blank">@top-stories-in-business-thenewsdesk</a> that's because they sell <a href="https://infosec.space/tags/Cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacist</a> <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Govware</a> to <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> and <a href="https://infosec.space/tags/Facist" class="mention hashtag" rel="nofollow noopener" target="_blank">#Facist</a>.

Kevin Karhan :verified:<a href="https://mamot.fr/@Amgine" class="u-url mention" rel="nofollow noopener" target="_blank">@Amgine</a> <a href="https://mastodon.me.uk/@PoliceStateUK" class="u-url mention" rel="nofollow noopener" target="_blank">@PoliceStateUK</a> by that logic, <a href="https://infosec.space/tags/Wikipedia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Wikipedia</a> would've to close it's Arabic-languaged part amidst crackdown by the Saudi Government demanding the ID of all contributors to it. <ul><li>Accept the fact that the <a href="https://infosec.space/tags/UK" class="mention hashtag" rel="nofollow noopener" target="_blank">#UK</a> is a <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> dictatorship and move on...</li></ul>

Kevin Karhan :verified:<a href="https://gts.churanova.eu/@shine" class="u-url mention" rel="nofollow noopener" target="_blank">@shine</a> <a href="https://social.wildeboer.net/@jwildeboer" class="u-url mention" rel="nofollow noopener" target="_blank">@jwildeboer</a> <a href="https://social.lfx.dev/@linuxfoundation" class="u-url mention" rel="nofollow noopener" target="_blank">@linuxfoundation</a> They just want to shill the <a href="https://infosec.space/tags/Cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacist</a> garbage tech of their highest-tier members, which are the <a href="https://infosec.space/tags/GAFAMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#GAFAMs</a>... <a href="https://infosec.space/@kkarhan/115010986088720245" translate="no" rel="nofollow noopener" target="_blank">https://infosec.space/@kkarhan/115010986088720245</a>

Kevin Karhan :verified:<a href="https://flipboard.social/@TechDesk" class="u-url mention" rel="nofollow noopener" target="_blank">@TechDesk</a> <a href="https://mastodon.world/@theverge" class="u-url mention" rel="nofollow noopener" target="_blank">@theverge</a> no and people should refuse that shit!Remember: <ul><li><a href="https://infosec.space/tags/AgeVerfication" class="mention hashtag" rel="nofollow noopener" target="_blank">#AgeVerfication</a> is <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> bs and <a href="https://infosec.space/tags/KYC" class="mention hashtag" rel="nofollow noopener" target="_blank">#KYC</a> is the illicit activty!</li></ul>

Kevin Karhan :verified:<a href="https://tomkahe.com/@GiftArticles" class="u-url mention" rel="nofollow noopener" target="_blank">@GiftArticles</a> <a href="https://infosec.space/tags/Australia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Australia</a> truly is <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a>!

Kevin Karhan :verified:<a href="https://noods.fun/@harmonycorrupted" class="u-url mention" rel="nofollow noopener" target="_blank">@harmonycorrupted</a> seriously, this <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> bs needs to be outlawed!<ul><li><a href="https://infosec.space/tags/ACAB" class="mention hashtag" rel="nofollow noopener" target="_blank">#ACAB</a> includes <a href="https://infosec.space/tags/AgeVerification" class="mention hashtag" rel="nofollow noopener" target="_blank">#AgeVerification</a>!</li><li><a href="https://infosec.space/tags/KYC" class="mention hashtag" rel="nofollow noopener" target="_blank">#KYC</a> is the <a href="https://infosec.space/tags/IllicitActivity" class="mention hashtag" rel="nofollow noopener" target="_blank">#IllicitActivity</a>!</li><li><a href="https://infosec.space/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> is a <a href="https://infosec.space/tags/HumanRight" class="mention hashtag" rel="nofollow noopener" target="_blank">#HumanRight</a>!</li><li>Believing minors can't circumvent this bs is an insult to their intellect!</li></ul>

Kevin Karhan :verified:<a href="https://mastodon.social/@alecmuffett" class="u-url mention" rel="nofollow noopener" target="_blank">@alecmuffett</a> <a href="https://infosec.space/tags/UK" class="mention hashtag" rel="nofollow noopener" target="_blank">#UK</a> is a <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> shithole aready...<ul><li>At least they are honest about it now...</li></ul><a href="https://infosec.space/tags/sarcasm" class="mention hashtag" rel="nofollow noopener" target="_blank">#sarcasm</a>

Kevin Karhan :verified:<a href="https://gives.hugz.online/@MelissaBearTrix" class="u-url mention" rel="nofollow noopener" target="_blank">@MelissaBearTrix</a> OFC, because the <a href="https://infosec.space/tags/UK" class="mention hashtag" rel="nofollow noopener" target="_blank">#UK</a> is a <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> dystopia that doesn't even acknowledge the right to remain silent in that regard...

Kevin Karhan :verified:<a href="https://meow.social/@patterfloof" class="u-url mention" rel="nofollow noopener" target="_blank">@patterfloof</a> assuming that <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> lawmakers actually cared and didn't just want to impose <a href="https://infosec.space/tags/Cyberfacism" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacism</a> and abuse the them-created infrastructure for even more illicit and nefarious purposes.

Kevin Karhan :verified:<a href="https://mastodon.social/@stman" class="u-url mention" rel="nofollow noopener" target="_blank">@stman</a> <a href="https://infosec.exchange/@Sempf" class="u-url mention" rel="nofollow noopener" target="_blank">@Sempf</a> <a href="https://chaos.social/@LaF0rge" class="u-url mention" rel="nofollow noopener" target="_blank">@LaF0rge</a> yes.Because physical SIMs, like any "cryptographic chipcard" (i.e. <a href="https://social.nitrokey.com/@nitrokey" class="u-url mention" rel="nofollow noopener" target="_blank">@nitrokey</a> ) did all that fancy public/private crypto on silicon and unless that was compromizeable (which AFAICT always necessistated physical access to the <a href="https://infosec.space/tags/SIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#SIM</a>, espechally in pre-<a href="https://infosec.space/tags/OMAPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMAPI</a> devices) the SIM wasn't 'cloneable' and the weakest link always had been the <a href="https://infosec.space/tags/MNO" class="mention hashtag" rel="nofollow noopener" target="_blank">#MNO</a> /.<a href="https://infosec.space/tags/MVNO" class="mention hashtag" rel="nofollow noopener" target="_blank">#MVNO</a> issueing (may it be through <a href="https://infosec.space/tags/SocialHacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#SocialHacking</a> employees into <a href="https://infosec.space/tags/SimSwapping" class="mention hashtag" rel="nofollow noopener" target="_blank">#SimSwapping</a> or LEAs showng up with a warrant and demanding "<a href="https://infosec.space/tags/LawfulInterception" class="mention hashtag" rel="nofollow noopener" target="_blank">#LawfulInterception</a>"):<ul><li>These "attack vectors" were known and whilst unfixable they could at least be mitigated by i.e. NEVER using a <a href="https://infosec.space/tags/PhoneNumber" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumber</a> for anything and/or using anonymously obtained <a href="https://infosec.space/tags/SIMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SIMs</a>. But more and more services like <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> did <a href="https://infosec.space/tags/regression" class="mention hashtag" rel="nofollow noopener" target="_blank">#regression</a> demanding <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> and more and more nations criminalized <a href="https://infosec.space/tags/AnonymousSimCards" class="mention hashtag" rel="nofollow noopener" target="_blank">#AnonymousSimCards</a> under utterly <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> & <a href="https://infosec.space/tags/FalsePretenses" class="mention hashtag" rel="nofollow noopener" target="_blank">#FalsePretenses</a>!</li></ul>Add to that the regression in flexibility: Unlike a <a href="https://infosec.space/tags/SimCard" class="mention hashtag" rel="nofollow noopener" target="_blank">#SimCard</a> which was designed as a vendor-independent, <a href="https://infosec.space/tags/MultiVendor" class="mention hashtag" rel="nofollow noopener" target="_blank">#MultiVendor</a>, <a href="https://infosec.space/tags/MultiProvider" class="mention hashtag" rel="nofollow noopener" target="_blank">#MultiProvider</a>, device agnostic unit to facilitate the the <a href="https://infosec.space/tags/authentification" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentification</a> and <a href="https://infosec.space/tags/encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#encryption</a> in <a href="https://infosec.space/tags/GSM" class="mention hashtag" rel="nofollow noopener" target="_blank">#GSM</a> (and successor standards), <a href="https://infosec.space/tags/eSIMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#eSIMs</a> act to restrict <a href="https://infosec.space/tags/DeviceFreedom" class="mention hashtag" rel="nofollow noopener" target="_blank">#DeviceFreedom</a> and <a href="https://infosec.space/tags/ConsumerChoice" class="mention hashtag" rel="nofollow noopener" target="_blank">#ConsumerChoice</a>, which with shit like <a href="https://infosec.space/tags/KYC" class="mention hashtag" rel="nofollow noopener" target="_blank">#KYC</a> per <a href="https://infosec.space/tags/IMEI" class="mention hashtag" rel="nofollow noopener" target="_blank">#IMEI</a> (i.e. <a href="https://infosec.space/tags/Turkey" class="mention hashtag" rel="nofollow noopener" target="_blank">#Turkey</a> demands it after 90 days of roaming per year) und <a href="https://infosec.space/tags/lMEI" class="mention hashtag" rel="nofollow noopener" target="_blank">#lMEI</a>-based <a href="https://infosec.space/tags/Allowlisting" class="mention hashtag" rel="nofollow noopener" target="_blank">#Allowlisting</a> (see <a href="https://infosec.space/tags/Australia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Australia</a>'s shitty <a href="https://infosec.space/tags/VoLTE" class="mention hashtag" rel="nofollow noopener" target="_blank">#VoLTE</a> + <a href="https://infosec.space/tags/2G" class="mention hashtag" rel="nofollow noopener" target="_blank">#2G</a> & <a href="https://infosec.space/tags/3G" class="mention hashtag" rel="nofollow noopener" target="_blank">#3G</a> shutdown!) are just acts to clamp down on <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> and <a href="https://infosec.space/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>.<ul><li>And with <a href="https://infosec.space/tags/EID" class="mention hashtag" rel="nofollow noopener" target="_blank">#EID</a> being unique per <a href="https://infosec.space/tags/eSIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#eSIM</a> (like the <a href="https://infosec.space/tags/IMEI" class="mention hashtag" rel="nofollow noopener" target="_blank">#IMEI</a> on top!) there's nothing stopping <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> regimes like "P.R." <a href="https://infosec.space/tags/China" class="mention hashtag" rel="nofollow noopener" target="_blank">#China</a>, <a href="https://infosec.space/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Russia</a>, <a href="https://infosec.space/tags/Iran" class="mention hashtag" rel="nofollow noopener" target="_blank">#Iran</a>, ... from banning "<a href="https://infosec.space/tags/eSIMcards" class="mention hashtag" rel="nofollow noopener" target="_blank">#eSIMcards</a>" (<a href="https://infosec.space/tags/eSIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#eSIM</a> in SIM card form factor) or entire device prefixes (i.e. all phones that are supported by <a href="https://grapheneos.social/@GrapheneOS" class="u-url mention" rel="nofollow noopener" target="_blank">@GrapheneOS</a> ), as M(V)NOs see the EID used to deploy/activate a profile (obviously they don't want people to activate eSIMs more than once, unless explicitly allowed otherwise.</li></ul>"[…] [Technologies] must always be evaluated for their ability to oppress. […] <ul><li>Dan Olson</li></ul>And now you know why I consider a <a href="https://infosec.space/tags/smartphone" class="mention hashtag" rel="nofollow noopener" target="_blank">#smartphone</a> with eSIM instead of two SIM slots not as a real <a href="https://infosec.space/tags/DualSIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DualSIM</a> device because it restricts my ability to freely move devices.<ul><li>And whilst German Courts reaffirmed §77 TKG (Telco Law)'s mandate to letting people choose their devices freely, (by declarong <a href="https://infosec.space/tags/fees" class="mention hashtag" rel="nofollow noopener" target="_blank">#fees</a> for reissue of eSIMs illegal) that is only enforceable towards M(V)NOs who are in <a href="https://infosec.space/tags/Germany" class="mention hashtag" rel="nofollow noopener" target="_blank">#Germany</a>, so 'good luck' trying to enforce that against some overseas roaming provider.</li></ul>Thus <a href="https://infosec.space/tags/Impersonation" class="mention hashtag" rel="nofollow noopener" target="_blank">#Impersonation</a> attacks in GSM-based networks are easier than ever before which in the age of more skilled than ever <a href="https://infosec.space/tags/Cybercriminals" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybercriminals</a> and <a href="https://infosec.space/tags/Cyberterrorists" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberterrorists</a> (i.e. <a href="https://infosec.space/tags/NSA" class="mention hashtag" rel="nofollow noopener" target="_blank">#NSA</a> & <a href="https://infosec.space/tags/Roskomnadnozr" class="mention hashtag" rel="nofollow noopener" target="_blank">#Roskomnadnozr</a>) puts espechally the average <a href="https://infosec.space/tags/TechIlliterate" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterate</a> User at risk.<ul><li>I mean, anyone else remember the <a href="https://infosec.space/tags/Kiddies" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kiddies</a> that fucked around with <a href="https://infosec.space/tags/CIA" class="mention hashtag" rel="nofollow noopener" target="_blank">#CIA</a> director <a href="https://infosec.space/tags/Brennan" class="mention hashtag" rel="nofollow noopener" target="_blank">#Brennan</a>? Those were just using their "weapons-grade <a href="https://infosec.space/tags/boredom" class="mention hashtag" rel="nofollow noopener" target="_blank">#boredom</a>", not being effective, for-profit cyber criminals!</li></ul>And then think about those who don't have privilegued access to protection by their government, but rather "privilegued access" to prosecution by the state because their very existance is criminalized... The only advantage eSIMs broight in contrast is 'logistical' convenience because it's mostly a <a href="https://infosec.space/tags/QRcode" class="mention hashtag" rel="nofollow noopener" target="_blank">#QRcode</a> and that's just a way to avoid typos on a cryptic <a href="https://infosec.space/tags/LocalProfileAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#LocalProfileAgent</a> link.

Kevin Karhan :verified:<a href="https://social.jsantos.eu/@jmcs" class="u-url mention" rel="nofollow noopener" target="_blank">@jmcs</a> <a href="https://mastodon.social/@dansup" class="u-url mention" rel="nofollow noopener" target="_blank">@dansup</a> given how <a href="https://infosec.space/tags/PayPal" class="mention hashtag" rel="nofollow noopener" target="_blank">#PayPal</a> bans people at random (and refuses to elaborate why when asked for, as said person hasn't violated their ToS!) I'd not trust them either.<ul><li>In terms of <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a>, <a href="https://infosec.space/tags/SEPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#SEPA</a> too has none as the <a href="https://infosec.space/tags/EU" class="mention hashtag" rel="nofollow noopener" target="_blank">#EU</a> didn't even try to oppose <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> <a href="https://infosec.space/tags/hegemony" class="mention hashtag" rel="nofollow noopener" target="_blank">#hegemony</a> imposed by the <a href="https://infosec.space/tags/USA" class="mention hashtag" rel="nofollow noopener" target="_blank">#USA</a>. </li></ul>So if you don't trust <a href="https://infosec.space/tags/cryptocurrency" class="mention hashtag" rel="nofollow noopener" target="_blank">#cryptocurrency</a> at all [which I don't blame you for when there's only <a href="https://infosec.space/@kkarhan/114818143957565290" rel="nofollow noopener" target="_blank">one</a> non - <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Shitcoin</a> on the market], consider <a href="https://infosec.space/tags/CashByMail" class="mention hashtag" rel="nofollow noopener" target="_blank">#CashByMail</a> instead.

Kevin Karhan :verified:<a href="https://infosec.exchange/@artfulmodder" class="u-url mention" rel="nofollow noopener" target="_blank">@artfulmodder</a> last time I checked <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> still demanded <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> in.the form of a <a href="https://infosec.space/tags/PhoneNumber" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumber</a>, still peddled the <a href="https://infosec.space/tags/MobileCoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#MobileCoin</a> <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Shitcoin</a> <a href="https://infosec.space/tags/Scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Scam</a> and didn't move out of the <a href="https://infosec.space/tags/Cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacist</a> <a href="https://infosec.space/tags/USA" class="mention hashtag" rel="nofollow noopener" target="_blank">#USA</a> despite <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudAct</a> being nothing new!<ul><li>Not to mention <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> is both able and willing to discriminate against users based off said PII. Just because they do it for "<a href="https://infosec.space/tags/Sanctions" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sanctions</a> <a href="https://infosec.space/tags/Compliance" class="mention hashtag" rel="nofollow noopener" target="_blank">#Compliance</a>" diesn't mean they ain't gonna change that nor that <a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener" target="_blank">@Mer__edith</a> (or anyone else at Signal) could be bribed or threatened to do so.</li></ul>They are <a href="https://infosec.space/tags/centralized" class="mention hashtag" rel="nofollow noopener" target="_blank">#centralized</a> <a href="https://infosec.space/tags/SingleVendor" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleVendor</a> & <a href="https://infosec.space/tags/SingleProvider" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleProvider</a> and are thus a <a href="https://infosec.space/tags/SinglePointOfFailure" class="mention hashtag" rel="nofollow noopener" target="_blank">#SinglePointOfFailure</a> per design!<ul><li>Unlike <a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener" target="_blank">@delta</a> (which is <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PGP</a>/MIME in a different UI) or <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> (which you can use via <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> / <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tor</a> and connect to a Server that is an <a href="https://infosec.space/tags/OnionService" class="mention hashtag" rel="nofollow noopener" target="_blank">#OnionService</a>.</li></ul>IMHO "memory tagging" is the least of Signal's problems. To me they stench "<a href="https://infosec.space/tags/ControlledOpposition" class="mention hashtag" rel="nofollow noopener" target="_blank">#ControlledOpposition</a>" just as hard as <a href="https://infosec.space/tags/AN%C3%98M" class="mention hashtag" rel="nofollow noopener" target="_blank">#ANØM</a> and incompetence as hard as <a href="https://infosec.space/tags/EncroChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#EncroChat</a>!

Kevin Karhan :verified:<a href="https://social.fossdle.org/@stevefoerster" class="u-url mention" rel="nofollow noopener" target="_blank">@stevefoerster</a> <a href="https://infosec.space/@CppGuy" class="u-url mention" rel="nofollow noopener" target="_blank">@CppGuy</a> whilst the <a href="https://infosec.space/tags/USA" class="mention hashtag" rel="nofollow noopener" target="_blank">#USA</a> isn't the only country known where the immigration officer has the ultimate say about whether one's allowed to enter or not (Japan has similar laws), it os the only one known to flex it so often that it's a <a href="https://infosec.space/@kkarhan/114708577420363170" rel="nofollow noopener" target="_blank">travel advisory.</a><ul><li>Alongside the fact that it's <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> af and if one cannot get data transfered one has to "mule in" storage like drugs, making it as bad as North Korea for the average traveler...</li></ul>I'd rather recommend <a href="https://infosec.space/tags/Germany" class="mention hashtag" rel="nofollow noopener" target="_blank">#Germany</a> for international students cuz it's way cheaper and has way higher quality of life cuz stuff like <a href="https://infosec.space/tags/Healthcare" class="mention hashtag" rel="nofollow noopener" target="_blank">#Healthcare</a> isn't an absurd clusterfuck!

Kevin Karhan :verified:<a href="https://mastodon.social/@derekmorr" class="u-url mention" rel="nofollow noopener" target="_blank">@derekmorr</a> <blockquote>Let it go, already. No one uses MobileCoin. You can’t even find an exchange to buy it.</blockquote>Then why does <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> still have that shit in it? <a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener" target="_blank">@Mer__edith</a> could've pulled that <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Shitcoin</a> yet refuses to do do!<blockquote>The Cloud Act is a non-issue. Signal doesn’t have data on users, so they can’t be forced to disclose it.</blockquote>That's literally wrong!<ul><li><a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> not only collects <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> in the form of a <a href="https://infosec.space/tags/PhoneNumher" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumher</a> but explicitly is able and willing to use that to dsicriminate against users and restrict app functionality based off their presumed juristiction. There is no "legitimate interest" for.doing so nor any legal mandate to do so (unless we excuse the ehole <a href="https://infosec.space/tags/MobileCoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#MobileCoin</a>-<a href="https://infosec.space/tags/Scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Scam</a>!)</li></ul><blockquote>It’s been 30 years, and no one uses xmpp. Let it go.</blockquote>Wrong again. Otherwise there wouldn't be thriving ecosystems and Apps to this day. It's just that corporate shills refuse to acknowledge that Signal - like all centralized, proprietary, <a href="https://infosec.space/tags/SingleVendor" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleVendor</a> and/or <a href="https://infosec.space/tags/SingleProvider" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleProvider</a> kessengers before and after - will inevitably die as their business model is not sustainable. Sake with <a href="https://infosec.space/tags/ICQ" class="mention hashtag" rel="nofollow noopener" target="_blank">#ICQ</a> really. The only exceptions are those that abolish <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> for <a href="https://infosec.space/tags/profit" class="mention hashtag" rel="nofollow noopener" target="_blank">#profit</a>, integrate actually working payments or sellout to a <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> <a href="https://infosec.space/tags/government" class="mention hashtag" rel="nofollow noopener" target="_blank">#government</a> (all those apply to <a href="https://infosec.space/tags/WeChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#WeChat</a>!)<blockquote>It’s shocking that people who claim to care about security and privacy push niche apps with terrible UX and no PFS like Delta or XMPP instead of the only private messenger with any real market share, Signal.</blockquote>You know what's shocking to me: People who are unable or rather unwilling.to acknowledge that Signal is garbage and it's requirement for a <a href="https://infosec.space/tags/PhoneNumber" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumber</a> kills any <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> benefits it may have on paper by virtue of being at best pseudonymous (assuming the userd don't live in a juristiction that demands "<a href="https://infosec.space/tags/KYC" class="mention hashtag" rel="nofollow noopener" target="_blank">#KYC</a>" for even prepaid <a href="https://infosec.space/tags/SIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#SIM</a> cards (ime. <a href="https://infosec.space/tags/Germany" class="mention hashtag" rel="nofollow noopener" target="_blank">#Germany</a>) or god forbid even <a href="https://infosec.space/tags/IMEI" class="mention hashtag" rel="nofollow noopener" target="_blank">#IMEI</a>|s (i.e. <a href="https://infosec.space/tags/Turkey" class="mention hashtag" rel="nofollow noopener" target="_blank">#Turkey</a> has a literal allowlist that'll kick any device off it's MNOs after 90 days within 365 days.<ul><li>The <a href="https://infosec.space/tags/UScentric" class="mention hashtag" rel="nofollow noopener" target="_blank">#UScentric</a> approach to <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> and <a href="https://infosec.space/tags/threats" class="mention hashtag" rel="nofollow noopener" target="_blank">#threats</a> makes Signal absolutely useless in many cases, and I do speak here from experience. </li></ul>I'd rather help people onboard <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#OMEMO</a> like <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> and/or <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener" target="_blank">@gajim</a> or <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PGP</a>/MIME like <a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener" target="_blank">@delta</a> & <a href="https://mastodon.online/@thunderbird" class="u-url mention" rel="nofollow noopener" target="_blank">@thunderbird</a> (incl. setting them up with <a href="https://infosec.space/tags/Orbot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Orbot</a> / <a href="https://infosec.space/tags/TorBrowserBundle" class="mention hashtag" rel="nofollow noopener" target="_blank">#TorBrowserBundle</a> / <a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener" target="_blank">@tails_live</a> so their traffic gets through <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> and doesn't provide any useable IP addresses. <ul><li>I've literally been there and done that!</li></ul>As for <a href="https://infosec.space/tags/Sustainability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sustainability</a>, providers like <a href="https://monocles.eu" rel="nofollow noopener" translate="no" target="_blank">https://monocles.eu</a> finance themselves by subscriptions (starting at €2 p.m.) which people can pay fully anonymous using <a href="https://infosec.space/tags/CashByMail" class="mention hashtag" rel="nofollow noopener" target="_blank">#CashByMail</a> and <a href="https://infosec.space/tags/Monero" class="mention hashtag" rel="nofollow noopener" target="_blank">#Monero</a> on top of common payment methods (i.e. SEPA wire transfer)...<ul><li>So even if you think "<a href="https://infosec.space/tags/monocles" class="mention hashtag" rel="nofollow noopener" target="_blank">#monocles</a> is a <a href="https://infosec.space/tags/honeypot" class="mention hashtag" rel="nofollow noopener" target="_blank">#honeypot</a>" that is mitigateable ciz unlike with Signal you can choose your own client, choose a different provider & exervise self-custody of all tue keys!</li></ul>

Kevin Karhan :verified:<a href="https://kolektiva.social/@oatmeal" class="u-url mention" rel="nofollow noopener" target="_blank">@oatmeal</a> <a href="https://mastodon.ar.al/@aral" class="u-url mention" rel="nofollow noopener" target="_blank">@aral</a> calling it "Dual Use" when it's explicitly <a href="https://infosec.space/tags/Cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacist</a> <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Govware</a> is like calling a Guillotine an "Industrial-Grade fruit Slicer"…

Kevin Karhan :verified:<a href="https://mastodon.social/@a_cubed" class="u-url mention" rel="nofollow noopener" target="_blank">@a_cubed</a> <a href="https://hachyderm.io/@cascheranno" class="u-url mention" rel="nofollow noopener" target="_blank">@cascheranno</a> <a href="https://mastodon.social/@geerlingguy" class="u-url mention" rel="nofollow noopener" target="_blank">@geerlingguy</a> I think <a href="https://infosec.space/tags/YouTube" class="mention hashtag" rel="nofollow noopener" target="_blank">#YouTube</a> should be forced to publish exactly what they don't like or ban from their platform, but that would result in <a href="https://infosec.space/tags/transparency" class="mention hashtag" rel="nofollow noopener" target="_blank">#transparency</a> instead of <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> uncertaintly where only people with range and connections get that <a href="https://infosec.space/tags/privilegue" class="mention hashtag" rel="nofollow noopener" target="_blank">#privilegue</a>... <ul><li>But that assumes that YouTube actually cares and doesn't suffer from late stage <a href="https://infosec.space/tags/Enshittification" class="mention hashtag" rel="nofollow noopener" target="_blank">#Enshittification</a> syndrome...</li></ul>

Kevin Karhan :verified:<a href="https://dumbfuckingweb.site/@silhouette" class="u-url mention" rel="nofollow noopener" target="_blank">@silhouette</a> <a href="https://vmst.io/@richi" class="u-url mention" rel="nofollow noopener" target="_blank">@richi</a> <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> <code>1.</code> You <a href="https://dumbfuckingweb.site/@silhouette/statuses/01JVYFY14DGHQ1GRSV6H8DZ2HX" rel="nofollow noopener" target="_blank">completely miss the points!</a> There is no "<a href="https://infosec.space/tags/TechnicalNecessity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechnicalNecessity</a>" to demand <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> like a <a href="https://infosec.space/tags/PhoneNumber" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhoneNumber</a> - espechally for a "<a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a>"-focussed messenger!<code>2. & 3.</code> <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> is able and willing to comply with <a href="https://infosec.space/tags/Cyberfacism" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacism</a> and pushing a <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Shitcoin</a> (<a href="https://infosec.space/tags/MobileCoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#MobileCoin</a>) makes it trivial to criminalize the App for "illegal & unregilated banking". If <a href="https://infosec.space/tags/Moxie" class="mention hashtag" rel="nofollow noopener" target="_blank">#Moxie</a> or <a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener" target="_blank">@Mer__edith</a> cared they'd yeet that thing (or didn't even integrate it to begin with!) to avoid the attention. And yes Signal does restrict the App functionality when using a phone number from <a href="https://infosec.space/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Russia</a> & <a href="https://infosec.space/tags/Iran" class="mention hashtag" rel="nofollow noopener" target="_blank">#Iran</a> (among other nations), thus affecting not only those in need of safe comms but by sending a verification code to them, earmarking them for police & intelligence. Which bings.me to the 1st agrument. <code>4.</code> <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tor</a> has a stellar record in terms of stability, integrity and censorship circumvention. DIY'ing something instead if following almost two decades of solid progress is absurd and violates "don't roll your own crypto" as a rule!<code>5.</code> Only with <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfCustody</a> can you protect your own data. Or do you really expect Staff from Signal to not talk <a href="https://web.archive.org/web/20220112020000/https://twitter.com/thegrugq/status/1085614812581715968" rel="nofollow noopener" target="_blank">when facing lifetime in jail?</a> If they have the keys, they can decrypt it, thus their <a href="https://infosec.space/tags/E2EE" class="mention hashtag" rel="nofollow noopener" target="_blank">#E2EE</a> is just a "<a href="https://infosec.space/tags/TrustMeBro" class="mention hashtag" rel="nofollow noopener" target="_blank">#TrustMeBro</a>!" concept. I mean, what prevents them from being forced into <a href="https://en.m.wikipedia.org/wiki/National_security_letter" rel="nofollow noopener" target="_blank">backdooring all comms</a> to <a href="https://mastodon.social/@icij" class="u-url mention" rel="nofollow noopener" target="_blank">@icij</a> as per <a href="https://infosec.space/tags/NSL" class="mention hashtag" rel="nofollow noopener" target="_blank">#NSL</a>? Any <a href="https://dumbfuckingweb.site/@silhouette/statuses/01JVYFYWQSWJNYY7ZT4S7E2G0J" rel="nofollow noopener" target="_blank">"guarantee"</a> without self-custody is worthless by virtue of being unenforceable!Signal pushing <a href="https://infosec.space/tags/TechPopulism" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechPopulism</a> instead of teaching folks that their <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> is worth diddly-piss wothout.<a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> & <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsec</a> is dangerous!<ul><li>And yes claiming "JuSt UsE sIgNaL!" is dangerous in the era of <a href="https://infosec.space/tags/Trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#Trump</a>'s <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> regime acting as it does (like with the <a href="https://infosec.space/tags/ICC" class="mention hashtag" rel="nofollow noopener" target="_blank">#ICC</a>)!</li></ul>Not to mention there are better options that don't do that shite (i.e. demand PII) and just work. <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#monoclesChat</a> & <a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener" target="_blank">@delta</a> / <a href="https://infosec.space/tags/deltaChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#deltaChat</a> for example can adapt way better to said risks and ain't run by a <a href="https://infosec.space/tags/VCmoneyBurningParty" class="mention hashtag" rel="nofollow noopener" target="_blank">#VCmoneyBurningParty</a>!

Kevin Karhan :verified:<a href="https://mastodon.social/@JuliusGoat" class="u-url mention" rel="nofollow noopener" target="_blank">@JuliusGoat</a> TBH, <a href="https://infosec.space/tags/DHS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DHS</a> makes <a href="https://infosec.space/tags/Gestapo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Gestapo</a> look like disorganized street gangsters cuz the <a href="https://infosec.space/tags/Nazis" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nazis</a> wished they had the <a href="https://infosec.space/tags/Cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberfacist</a> data hoarding in their days and <a href="https://infosec.space/tags/NSAbook" class="mention hashtag" rel="nofollow noopener" target="_blank">#NSAbook</a> to track folks.

Kevin Karhan :verified:<a href="https://social.openrightsgroup.org/@openrightsgroup" class="u-url mention" rel="nofollow noopener" target="_blank">@openrightsgroup</a> you cannot fix what's inherently broken!<a href="https://infosec.space/tags/OSA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OSA</a>, like <a href="https://infosec.space/tags/KOSA" class="mention hashtag" rel="nofollow noopener" target="_blank">#KOSA</a>, <a href="https://infosec.space/tags/FOSTA" class="mention hashtag" rel="nofollow noopener" target="_blank">#FOSTA</a> & <a href="https://infosec.space/tags/SESTA" class="mention hashtag" rel="nofollow noopener" target="_blank">#SESTA</a> before, is <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberfacist</a> bs and everyone in favour of it should be voted out of office!

Recent searches

Search options

Administered by:

Server stats:

#cyberfacist