Mark GardnerNov 26, 2022

ATTENTION EVERYONE WRINGING THEIR HANDS OVER “#MASTODON ADMINS CAN READ MY DIRECT MESSAGES”: #SysAdmins have *always* been able to read your #email and DMs unless encrypted, including at the big #SocialNetworks and Internet providers. We used to have t-shirts that said, “I READ YOUR EMAIL.”

It’s just hitting now because you got used to places where the admins were kept away in their cubicles and data centers instead of greeting you at the front door.

#privacy #security #InfoSec #cybersecurity

Show threadMark GardnerNov 26, 2022

Oh, and #Slack, #Discord, #Steam, etc., all down the line too. Unless they have end-to-end #encryption where *you* and *only you* have the *only* private key, it’s not #private. No exceptions.

#privacy #security #InfoSec #cybersecurity

Show threadNephrynNov 26, 2022
@mjgardner How about #Signal?
Show threadMark GardnerNov 26, 2022

@nephryn @signalapp is well-known to be end-to-end #encrypted. Only conversation participants hold keys https://support.signal.org/hc/en-us/articles/360007320391-Is-it-private-Can-I-trust-it-

#Signal #E2EE #encryption #security #InfoSec #privacy

Show threadNephrynNov 26, 2022
@mjgardner @signalapp @hypermug1
Thank you! So, from what I gather, the safety numbers are the encryption, and they are randomly created when I add a new contact and stored only on my device and my contact's, and nowhere else. That's how I know I have the encryption key and no one else, which was one of the requisites you mentioned in the beginning, Mark.
Show threadMark Gardner
@nephryn @signalapp @hypermug1 Kinda… A Signal safety number is made from a key and helps you verify it, but it’s not the key itself. You can’t take a safety number and use it to encrypt or decrypt a message, and you can’t reverse the process that made the safety number in order to get the key that was used to make it.
Nov 27, 2022 at 12:21amWeb
Show threadMark GardnerNov 27, 2022
@signalapp @hypermug1 @nephryn The technical term for it is “cryptographic hash.” Drop that term at a party next time you want to see if any nerds like me are in attendance 🤓
Show threadNephrynNov 27, 2022
@mjgardner @signalapp @hypermug1 Great tip. I'll make sure to do that. 😄 Unfortunately, there hasn't been many parties lately, so I might have to hang on to my cryptographic hash for a while. 😅 Thanks again for all the information. I googled cryptographic hash and found a page with a YT clip trying to explain it to me, so I've been indulging myself further.   👩‍💻https://www.hypr.com/security-encyclopedia/cryptographic-hash-function
What is a Cryptographic Hash Function (CHF)? | Security Encyclopedia

A cryptographic hash function (CHF) is an equation used to verify the validity of data.