End to end encryption doesn’t do much if they can access one of the “ends”
Discussion
🎯,
The best advantage you can have in digital messaging is using some sort of codified language for plausible deniability.
PGP remains the gold standard.
Yea it’s pretty good 😁 *bandum-tss*
I've been using it since the 90s, and I think folks don't want to make it easy to use for ordinary people. Either for hubris reasons, or information warfare reasons. There were PGP plugins/apps in the late 90s and early 2000s that worked seamlessly... they vanished from the major clients and providers.
Signal used to pride itself on actually being honest and not storing users data.
Maybe after their last meeting with the glowboys they were "persuaded" to start monitoring user messages?
Seems like they collected it from the phone local storage?
Yes looks like they mentioned that they pulled the data from CZs phone not Signals servers.
Guess they pwned his phone.
I wonder if you turn off backups if you're safe
Phone firmware could've also been the culprit, maybe his phone was unknowingly sending data back to Apple or Samsung? Who knows.
Way too many factors and we'll probably never be told exactly how the Feds compromised him.
Best line of defense is https://grapheneos.org and practicing good opsec.
What do you think the tradeoff is between this and calyx?
I've only tried calyx so far,
Graphene is more secure, a little more inconvenient tho but from my experience with a little bit of setup you can get it working just as great as a proprietary Android OS.
Google Play services are optional and sandboxed and they can only access only what you explicitly give them access to.
What makes graphene more secure?
Nice write up 👍🤝
Maybe he downloaded TicTok
That’s the only way I’ve seen it done prior. The unknown questions with bigger ramifications are:
- Backdoors
- Internal corporate spy/informant
- Targeted device exploitation/exfiltration
- Cryptography failures
- Something something synced cloud storage