Krzysztof Dmowski @xaphanpl

Replied in thread

**VeijoRyhanen** @VeijoRyhanen@suomi.social · Mar 1

VeijoRyhanen @VeijoRyhanen@suomi.social

@lari "Jos hävittäjässä on #ITAR -alaisia osia, sen vienti voi vaatia Yhdysvaltain hyväksynnän.

Jos kone on täysin eurooppalainen (kuten #Rafale), myynti ei ole riippuvainen Yhdysvalloista."
https://chatgpt.com/share/67c2ea8c-3a20-8011-b595-d0496cce7886

ChatGPTChatGPT - Maanpetos ja propagandaShared via ChatGPT

Replied in thread

**Kevin Karhan** @kkarhan@infosec.space · Feb 21

Feb 21

Kevin Karhan @kkarhan@infosec.space

@erebion @inaruck es gibt soviele Gründe weshalb Mensch nicht @signalapp vertrauen sollte.

Aber um es nochnal klar zu erklären:

#Signal verlangt #Telefonnummer = #PII (Persönlich identifizierbare Informationen). [Und nein, sich irgendwo zwielichtig ne Nummer als Ausrede greift nicht!]
Signal ist zentralisiert & #SingleVendor sowie #SingleProvider!
Signal fällt wegen Sitz in den #USA unter #CloudAct = inhärent mit #DSGVO & #BDSG inkompatibel!
Signal erlaubt keine #SelfCustody aller Keys und ist deshalb für Einige Angriffsmethoden offen!

Nur echte #Dezentralisierung wie bei #XMPP+#OMEMO kann #Datenschutz, #Informationssicherheit und #Vertraulichkeit sicherstellen.

Anders als Signal kann @monocles nicht gegen Nutzer basierend auf Herkunft (#Rufnummer!) diskriminieren und anders als Signal funktioniert XMPP+OMEMO problemlos über @torproject / #Tor und kann als #OnionService #SelfHosted werden, für maximale #Privatsphäre und #Datenhoheit!

Die strukturellen Probleme von Signal machen es angesichts einer #gleichgeschaltet|en #USA ein absolut unnötiges #Risiko, denn ich garantiere @Mer__edith wird für keine*n User*in lebenslange #Beugehaft riskieren!

Genauso wie's keine "#LoglessVPN|s" gibt!

Und #Signal ist sehr wohl in der Lage #Govware - #Backdoors zu integrieren, denn sonst wären die wegen #ITAR bereits geknastet worden, weil diese #Nutzer*innen aus #Kuba, #Nordkorea und #Russland haben!

YouTubeSignal's Terrible MobileCoin BetrayalBy The Hated One

**Kevin Karhan** @kkarhan@infosec.space · Jan 23

Jan 23

Kevin Karhan @kkarhan@infosec.space

@lucasmz @Avitus @david_chisnall the benefit of #XMPP+#OMEMO is that there are several providers, including free options...

@monocles also supports #Monero and #CashByMail for those that can't use #PayPal, #Stripe or #SEPA.

All #PII incl. #PhoneNumbers can and will be abused by existing governments and if users don't pay, then they are the product and their data is the one to be sold.

#KYC IS THE #IllicitActivity WHEN IT COMES TO #ComSec!

After all, you have the same cost problem with phone numbers. Even if one doesn't pay per line/number and never pay for calls and texts, they still have to top it up to extent validity.

And again: It's way easier for a government to demand an ID for a #SIM that works in networks around their country (i.e. #Turkey demands registration on a per-#IMEI - basis *with #ID) than to tunnel XMPP+OMEMO through @torproject over #EDGEland-speed #2G networks.

Plus you relying an unfixably insecure #Telephony makes a system inherently unsafer than it needs to be...

This is how people get caught!

Also #Signal is able and willing to use said PII to restrict and ban users and if I were some dissident in Cuba or North Korea or even just Eritrea or Yemen I'd not rely on non-enforcement of #OFAC / #USML / #ITAR since Signal can obviously distinguish & identify accounts by virgue if their #PhoneNumber!

Always think "How can this be weaponized against someone?" when it comes to #privacy!

GitHublists.d/xmpp.servers.list.tsv at main · greyhat-academy/lists.dList of useful things. Contribute to greyhat-academy/lists.d development by creating an account on GitHub.

#privacy

Replied in thread

**Spaceflight** @spaceflight@techhub.social · Nov 28, 2023

Nov 28, 2023

Spaceflight @spaceflight@techhub.social

“Now that #China is a major #SpacePower, I suspect the long-term result – assuming the #US does not change its attitude – will be more #ITAR-free products developed in places like #Europe and the #UAE , and ultimately the rest of the world depending less on buying US #space products.” https://www.scmp.com/news/china/science/article/3214396/us-tech-rules-bar-uae-moon-rover-chinas-change-7-mission-sources

South China Morning Post · Mar 23, 2023Exclusive | US tech rules bar UAE moon rover from China’s Chang’e 7 mission: sourcesThe United Arab Emirates’ Rashid-2 has fallen foul of restrictions aimed at keeping sensitive technology out of Chinese hands.

Replied in thread

**Kevin Karhan** @kkarhan@mstdn.social · Jul 5, 2023

Jul 5, 2023

Kevin Karhan @kkarhan@mstdn.social

@JamesBaker @signalapp @openrightsgroup

Personally, I think the time for pleas and petitions is over:

What is needed are fully #decentralized, #SelfHosting-capable and #FLOSS'd as well as "#E2EE by default" comms and the full rejection of any #Cyberfacism.

This inevitably must include #ITAR & #WassenaarArrangement as well as designing systems to be hardened against attacks including "#LawfulInterception"...

I really need to work more on the #PocketCrypto:
https://github.com/KBtechnologies/PocketCrypto

GitHubGitHub - KBtechnologies/PocketCrypto: An airgapped encryption/decryption device for off-grid communicationAn airgapped encryption/decryption device for off-grid communication - KBtechnologies/PocketCrypto

Replied in thread

**Kevin Karhan** @kkarhan@mstdn.social · Jul 3, 2023

Jul 3, 2023

Kevin Karhan @kkarhan@mstdn.social

@madargon Also everyone who's supporting or complying with #ITAR / #WassenaarArrangement and other #cyberfacist "Export Controls on Cryptography" is doing the exact same shit!

Because in the 21st century, effective #cryptography doesn't require some bulky appliance but is #code and the only ones being penalized are #civilians whereas #NorthKorea and #Iran OFC will have unrestricted access to technology.