@yetzt Jurnalists who don't have #PGP setup , their #Pubkey and eMail Published published for secure comms per PGP/MIME should not be allowed to call themselves journalists nor practise journalism.

• It's 2026!

@tails_live / @tails / #Tails has been out there for way over a decade, alongside @cryptoparty / @cryptoparty / #CryptoParty / #CryptoParties and refusing to exercise proper #ComSec is like a surgeon refusing to wash their hands and put on gloves and properly desinfect these before starting surgery: A violation of #ethics and #care so bad it should bar them from any #journalism for life.

• Like this isn't complicated and basic "Duty to Care", like a Firefighter, Police Officer, Medical Doctor, Paramedic or Nurse being able amd obligated to do CPR.

  • If they can't be assed to do this basic protection of sources then I'd consider them #UsefulIdiots that only want to act as #snitches like #GlennGreenwald & @theintercept when they literally snitched on Reality Winner with neither coordination with nor care for her because they are at best criminally incompetent if not able and willing to act as means to discover reakers and deliver people like her on a silver platter.

@signalapp you are lying by omnission and technicality because why else do you demand a #PhoneNumber and mandate users to grant access to a devices' camera just to let them use more than the one device they currently use?

• You could've easily allowed either importing the QR-Code or offered a #Pubkey-ID to type in. But you chose neither…

@StarkRG nodds in agreeement In a #classroom-like #setup we'd more likely see some centralized, self-hosted #managment solution like #Landscape or #RustDesk being used.

• I can see why they did this: It's clearly inspired by tools like #AnyDesk and I do have to applaud them for that.

And if this acts similar to #WebCall and merely acts as a "Rendrevous-Server" then traffic and thus costs should be quite low.

• Still I expect this to later become #enshittified with an ever more expensive #subscription model like with #TeamViewer.

I'd still hope they #OpenSource the #Backend so that there's another competitor to #Dayon and #RustDesk available...

• In the meantime just setting up a sudo admin user with #Pubkey-only auth on #SSH is likely the way to do some admin stuff.

Maybe one day @RaspberryPi will even add #PXE - #NetBoot capabilities to their #RaspberryPi and thus allow for #DisklessWorkstation - Setups, saving a crapton on #MicroSD cards that are prone to get lost and/or stolen...

@lucasmz @Anthony_Kraudelt @squads nah.

One submits a #Pubkey amd that's being used to #encrypt the #2FA message.

@Chiquidrakula @COSAntiFascists @iris @Em0nM4stodon @cryptoparty @cryptoparty

Now if you don't trust @monocles nor @protonprivacy (which IMHO is fair and correct!) and you can't use @thunderbird or something because you have no private computer with internet access [i.e. only a work-issued laptop you can't use for anything non-work - related] and you can't just boot into @tails_live / @tails / #Tails or a portable #Linux #Desktop distro at all then the real "#GalaxyBrainChair" - level "#BigThink" you can do is go the "#OfflinePGP" route and thus encrypt & decrypt your messages on a different device entirely.

• The main problem may be that you'd then have to get that to the machine from which you can send it, which as we all know from the #MattKC video means you gotta "keep it brief" [as in 2.944 bytes short] if you want to do the webcam & screen method of #airgapping...
  

I just didn't have time to get the "Airgapped Transfer Protocol" done, but setting the *"Barcode Scanner" App into bulk mode makes it less tedious to import stuff to an Android device...

• Again: The nice part with #OpenPGP & #PGP/MIME is that you don't have to trust anyone but yourself and maybe your communication partners' ability to make proper #Keys and get the #Pubkey to you...