<html><head></head><body><div>On Thu, 2017-03-23 at 10:24 -0400, Dustin Strickland wrote:</div><blockquote type="cite"><div dir="auto">Signal bring compromised isn't even a question. WL just put out documents that show the CIA's capability to foil the encryption on all secure messaging services for mobile. They use os-level exploits and intercept communications before they're encrypted by the app. I no longer go out of my way to protect my privacy because it just doesn't help. They've ruined cyber security.</div></blockquote><div><br></div><div>Not so. It's a game of "whack-a-mole". In order to bypass the device encryption, the device must be compromised. For most devices a wipe and reinstall periodically will reduce the threat exposure. It still does boil down to "do you really OWN that device or are you just allowed to use it for a fee".</div><div><br></div><div>For microsoft and apple users, there's pretty much no hope. Apple talks about user security and stands up to federal demands but reserves all real control for apple.</div><div><br></div><div>Microsoft makes no claims to user security and a track record that back it.</div><div><br></div><div>So it's up to the Linux and BSD crowd. I can't lump android into that if I can't get the source for all the OS stack on my phone. Sure, we have cyanogen (or what's left of it) but getting that installed with the "WTF DOES THIS DO?!?!?" binary blob that controls the hardware is an unpleasant feeling.</div><blockquote type="cite"><div class="gmail_extra"><br><div class="gmail_quote">On Mar 23, 2017 10:00 AM, "DJ-Pfulio" <<a href="mailto:DJPfulio@jdpfu.com">DJPfulio@jdpfu.com</a>> wrote:<br type="attribution"><blockquote type="cite">Signal is a huge target. I have ZERO doubt that all that traffic is<br>
being captured for later decryption. A weakness WILL BE FOUND and<br>
exploited, if not in the program, in the OS hosting it.<br>
<br>
If you are a dissident group trying to alter a government, might want to<br>
keep looking for a less popular solution. Use a little trade-craft in<br>
your OpSec.<br>
<br>
I believe that a false sense of security is worse than believing<br>
everything is non-secure, and acting appropriately.<br>
<br>
But if you are sharing secret family recipes, it is probably good<br>
enough. The more traffic on the internet that is encrypted, the better.<br>
Easier to hide a raindrop in a rainstorm than hiding a single balloon on<br>
a sunny day.<br>
<br>
Don't believe all the marketing hype - even the stuff I quoted below<br>
about retroshare. Do some packet sniffing. See what leaks.<br>
<br>
For example, how many people are/were using Lastpass? How many leaked<br>
credentials got out due to the latest flaw with FF/chrome plugins. An<br>
online password manager just seems foolish to me. I prefer my password<br>
manager NOT to having any network code.<br>
<br>
<br>
On 03/23/2017 09:21 AM, Ted W. wrote:<br>
> If all you want is a way to securely communicate with family use Signal.<br>
> It's not for email but it makes a great Apple Messages replacement. My<br>
> wife and I now use it since I moved off iOS and back to Android. It's<br>
> about a simple as it can get for this sort of thing.<br>
><br>
> -Ted<br>
><br>
> On Wed, Mar 22, 2017 at 03:31:34PM -0400, DJ-Pfulio wrote:<br>
>> On 03/22/2017 02:00 PM, Alex Carver wrote:<br>
>>> I want to see something that is easy for my parents to use.<br>
>><br>
>> Might be worth looking at RestroShare.<br>
>><br>
>> <a href="http://retroshare.net/" rel="noreferrer" target="_blank">http://retroshare.net/</a><br>
>> "Retroshare creates encrypted connections to your friends. Nobody can<br>
>> spy on you. Retroshare is completely decentralized. This means there are<br>
>> no central servers. It is entirely Open-Source and free. There are no<br>
>> costs, no ads and no Terms of Service."<br>
>><br>
>><br>
>> ______________________________<wbr>_________________<br>
>> Ale mailing list<br>
>> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
>> <a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo/ale</a><br>
>> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
>> <a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo</a><br>
>><br>
>><br>
>> ______________________________<wbr>_________________<br>
>> Ale mailing list<br>
>> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
>> <a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo/ale</a><br>
>> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
>> <a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo</a><br>
<br>
<br>
--<br>
Got Linux? Used on smartphones, tablets, desktop computers, media<br>
centers, and servers by kids, Moms, Dads, grandparents and IT<br>
professionals.<br>
______________________________<wbr>_________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo</a><br>
<br></blockquote></div></div>
<pre>_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org">Ale@ale.org</a>
<a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
</pre></blockquote><div><span><pre><pre>-- <br></pre>James P. Kinney III
Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
http://heretothereideas.blogspot.com/
</pre></span></div></body></html>