memThe things one runs across sometimes.
I keep wishing I could run across my old directory of domain administrators from the late '80s. A paper book (I was in it). From bbn I think. I think that got lost several office moves ago unfortunately.
Kevin Karhan 
Also the blatant dismissal of absolitely basic #OpSec & #ComSec is just flabberghasting.
- It's inherently wrong to put all eggs in one basket and #Signal being not shut down like #SkyECC & #EncroChat makes it just as sus as #ANØM / #OperationIronside / #OperatioTrøjanShield and #CryptoAG / #MINERVA / #RUBIKON.
Only #decentralized, #OpenSource & #OpenStandards can actuall survive long-term and remain #secure.
- Otherwise we'd all gaslight ourselves into ignoring the hard lessions we learned that bought us to the #Fediverse and why we ain't on #Shitter or #tumblr or #BrownSky or #NSAbook (any more)!
It's the same reasons we use #PGPG/MIME & #SSH and not #X400 & #X25!
- Unlike with @signalapp one doesn't has to trust the provider or app. #XMPP+#OMEMO works regardless if you use @monocles or @gajim or do #SelfHosting and only trust code you wrote yourself...
IOW: Think "How can you weaponize Signal?" and see what you csn do just holding key people in contempt...
- And I'm not even talkibg about #Govware - #Backdoors and #MassSurveillance alike #Room651A, but just duely submitted warrants that @Mer__edith will comply with...
The less #info a provider has, the less they can be forced to snitch upon customers.
- So even if you don't give a shit that #CloudAct makes this a "#CantUse & #WintUse" (out of US-centrist privilegue to not comply #GDPR & #BDSG) for many, it's still dishonest.
"#JustUseSgnal!" is a form of dangerous "#TechPopulism" aimed at bamboozling #TechIlliterates who don't know better, abusing information asymetry to pull rank instead of investing the time and effort to *explain "how" and "why" this is indeed a good or bad idea.
- There's a reason why @tails_live / @tails / #Tails doesn't include #Signal and why I'll say it again that XMPP+OMEMO over @torproject / #Tor is the gold standard in terms of #privacy and #security when it comes to #ComSec that isn't #airgapped aka. "Airgapped PGP".
The only ones that have a chance to beat that are @delta / #deltaChat but that's just #PGP/MIME #eMail in a nice UI...
- You may now laugh at me and think my "#TinfoilHat sits too tight" but I'm shure sooner or later I'll be evidenced as correct...
Cassandrich (@dalias@hachyderm.io)
@kkarhan@infosec.space @signalapp@mastodon.world @monocles@monocles.social @lauren@mastodon.laurenweinstein.org Very few systems promoted as Signal alternatives match the cryptographic privacy properties (see: ratcheting, etc.) of Signal. The claims about "located in the USA" and "Cloud Act" are all nonsense because the only threat to Signal users from this is availability (seizure and shutdown of the server infrastructure), not undetected breakage of privacy properties. There are presently no systems with superior privacy properties to Signal *and* level of functionality on par with what general public expects. There are a lot (like the XMPP stuff, *sigh*, and Matrix) that are worse in both regards. If you're happy with reduced functionality, Cwtch (and possibly some other similar Tor-based systems) or VeilidChat are stronger, but it's gonna be a while before you convince normies to use them, and in the mean time they're still going to be on insecure shit like WhatsApp, FB Messenger, Telegram, etc...
Marko JahnkeHaha, I recognized that on Dec 1 2024, I will be an #InfoSec professional for 25 years.
I had almost any kind of possible job in InfoSec, but my heart still beats for low-level technical stuff.
As mentioned already, my first graduate project was to contribute to an implementation of PCT (Protecting Content Type), a signature scheme for #X400 messages in the late 1990s.
Kevin Karhan 
@CodexArcanum @mastodonmigration I do hope so that people finally realize that only #OpenSource & #MultiVendor / #MultiProvider solutions and standards will survive and live.
That's why #AIM & #ICQ are dead but #IRC & #XMPP alive and well.
That's why #Fax and #eMail are around and why #X400 & #AS2 only exist in their small nieches.
That's why #Joyn failed and died before #MMS and why in the end only #FLOSS & #OpenStandards will survive long-term.
@emilis the latter...
#eMail timeouts are in the magnitude of hours if not days, but even the worst #API|s will timeout within 15mins of not a few seconds.
And faster comms like #X400 & #AS2 never caught traction outside nieches where security and traceability of communication paths was more important..
JanWas man mit #Raspberry Pi, Audio DAC und einem alten #Oszilloskop halt so macht 😎
#oscilloscope #oscilloscopemusic #raspberrypi #mushrooms #shrooms #x400 #suptronics #geekworm
repost from #instagram export (original date: 02.02.2019)
#oscilloscope #oscilloscopemusic #raspberrypi #mushrooms #shrooms #x400 #suptronics #geekworm
repost from #instagram export (original date: 02.02.2019)
2000-2001, we developed the first web based mobile #GUI for the #X400 dinosaur 😆 .
The screenshots show it on early #WindowsMobile and #PalmOS.
#ISO #X400 #MHS (Message Handling System). What an anachronism.
1999-2000, we implemented the #PCT (Protected Content Type) Standard that was basically equivalent to integrity protection an digital signatures w/ X.509 certificates in S/MIME.
https://www.itu.int/rec/dologin_pub.asp?lang=e&id=T-REC-F.400-199906-I!!PDF-E&type=items
