Kevin Karhan :verified: (@kkarhan@infosec.space)

@derekmorr@mastodon.social > Let it go, already. No one uses MobileCoin. You can’t even find an exchange to buy it. Then why does @signalapp@mastodon.world still have that shit in it? @Mer__edith@mastodon.world could've pulled that #Shitcoin yet refuses to do do! > The Cloud Act is a non-issue. Signal doesn’t have data on users, so they can’t be forced to disclose it. That's literally wrong! - #Signal not only collects #PII in the form of a #PhoneNumher but explicitly is *able and willing* to use that to dsicriminate against users and restrict app functionality based off their presumed juristiction. There is no *"legitimate interest"* for.doing so nor any legal mandate to do so (unless we excuse the ehole #MobileCoin-#Scam!) > It’s been 30 years, and no one uses xmpp. Let it go. Wrong again. Otherwise there wouldn't be thriving ecosystems and Apps to this day. It's just that corporate shills refuse to acknowledge that Signal - like all centralized, proprietary, #SingleVendor and/or #SingleProvider kessengers before and after - will inevitably die as their business model is not sustainable. Sake with #ICQ really. The only exceptions are those that abolish #privacy for #profit, integrate *actually working payments* or sellout to a #cyberfacist #government (all those apply to #WeChat!) > It’s shocking that people who claim to care about security and privacy push niche apps with terrible UX and no PFS like Delta or XMPP instead of the only private messenger with any real market share, Signal. You know what's shocking to me: People who are unable or rather unwilling.to acknowledge that Signal is garbage and it's requirement for a #PhoneNumber kills any #privacy benefits it may have on paper by virtue of being at best pseudonymous (assuming the userd don't live in a juristiction that demands *"#KYC"* for even prepaid #SIM cards (ime. #Germany) or god forbid even #IMEI|s (i.e. #Turkey has a literal allowlist that'll kick any device off it's MNOs after 90 days within 365 days. - The #UScentric approach to #privacy and #threats makes Signal absolutely useless in many cases, and I do speak here from experience. I'd rather help people onboard #XMPP+#OMEMO like @monocles@monocles.social and/or @gajim@fosstodon.org or #PGP/MIME like @delta@chaos.social & @thunderbird@mastodon.online (incl. setting them up with #Orbot / #TorBrowserBundle / @tails_live@venera.social so their traffic gets through @torproject@mastodon.social and doesn't provide any useable IP addresses. - *I've literally been there and done that!* As for #Sustainability, providers like https://monocles.eu finance themselves by subscriptions (starting at €2 p.m.) which people can pay *fully anonymous* using #CashByMail and #Monero on top of common payment methods (i.e. SEPA wire transfer)... - So even if you think *"#monocles is a #honeypot"* that is mitigateable ciz unlike with Signal you can *choose your own client, choose a different provider & exervise self-custody of all tue keys!*