Kevin Karhan Oct 7

$INSTANCE defederating infosec.space cuz 'Feds are there' is like the most dense idea I've heard.

  • Sorry to break it to you, but @snowden and the whole #PRISM affair seems to have gone over your head...

We live in the age of #33ThomasStreet & #Room641A, so unless you put your stuff behind a #VPN that endpoints in #Tor, they'll #BULLRUN you for the lulz.

  • If you are genuinely frightened about the #NSA aka. #AmericanStasi - (and you should) - then you need to realize that your threat assessment either accepts that and treats all comms in the #Fediverse as public and insecure (Which #Mastodon explicitly warns you about in it's DMs: They are not secure!) or you stop using #Fedi entirely.

Like you guys honestly believe that using #Signal will be more secure than #XMPP+#OMEMO when the confirmation-#SMS sent by @signalapp will earmark you as 'Person of Interest'… and it's very centralized nature among many problems makes it a #HoneyPot run by #UsefulIdiots from my POV!

.
.
.

Look, I hate to be the one poppin' bubbles and you with your instance have your right to choose to (de-)federate with whomever you want.

  • Which is why I don't callout said instance. Dogpiling wouldn't fix people that densely wrapped in tinfoil.

  • You have the right to block me if that's too painful for ya.

But just like looking away doesn't make problems go away, neither will ignoring the truth.

I'm sorry if this #venting seems bitter, but some folks really need to get the fuck outside and #TouchGrass since there are folks on said instance working in that whole MIL/INTEL complex they so despise.

So, you want to be a darknet drug lord... - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

Pastebin
Show threadKevin Karhan Oct 7

The fact that $INSTANCE allows #discord & #telegram links is just one of the reasons I can't take their idea serious.

  • But enough rambling…

You do you, $instance…

Show threadAlex@rtnVFRmedia Suffolk UKOct 7

@kkarhan there's folk who get paranoid because someone now in their 40s/50s was something like a park ranger or a traffic warden in their 20s-30s - so they did have *some* state authority in a limited area, often doing a socially beneficial job, and have since moved on to another occupation, but even *that* fails the purity test.

I mostly use Signal to send cat pictures to my sister, as I don't want to pay British Telecom for that (MMS may not be covered by free use in my mobile plan), and don't trust even that for full security.

nearly 40 years ago the chaps at the BBC Receiving Station (also part of GCHQ) told me "*all* signals can be traced to physical location, the amount of encryption is irrelevant - sometimes the only safe option is not to send the signal in the first place.."

Show threadKevin Karhan Oct 7
@vfrmedia precisely that is the reason why #CIA & #DoD bailed out #Iridium, since #IridiumBurst supports recieve-only units…
Show threadKevin Karhan Oct 7

@vfrmedia And this ain't a "conspiracy theory" but obviously the case...

Also this is a good talk...

Eccentric Orbits: Iridium Story | John Irving Bloom | Talks at Google

YouTube
Show threadAlex@rtnVFRmedia Suffolk UKOct 7
@kkarhan modern version of numbers stations? (those are still going, although not the best for real time or more time-critical message delivery due to the effects of fading and QRM (interference))
Show threadKevin Karhan 

@vfrmedia no.

Eccentric Orbits: Iridium Story | John Irving Bloom | Talks at Google

YouTube
Oct 7 at 5:10pmWeb
Show threadAlex@rtnVFRmedia Suffolk UKOct 7
@kkarhan I was wondering if it was something like that (as VHF pagers are still widely used in UK to this day, but very few of the POCSAG/FLEX messages are encrypted)
Show threadKevin Karhan Oct 7

@vfrmedia Yeah, except #Iridium too is #unencrypted!

And I've yet to see @AuswaertigesAmt actually respond to me hinting at them that their #ComSec is compromized!

38C3 - Investigating the Iridium Satellite Network

YouTube
Show threadKevin Karhan Oct 7
@vfrmedia Granted those folks later had access to a "#TestKit" which can verify #Handset functionality.
Sec, schneider: Iridium Hacking

YouTube
Show threadKevin Karhan Oct 7
@vfrmedia ...and whilst I have an idea who's the person that stopped using iridium (not me!) I'm not gonna say who..
Sec, schneider: Iridium Hacking

YouTube