• 0 Posts
  • 5 Comments
Joined 1 year ago
cake
Cake day: January 31st, 2025

help-circle
  • You can move to any other service, but once it becomes popular enough to draw attention they might also get blocked as well. If it’s centralized, then the central servers can be blocked and it’s not longer working. If it’s decentralized and peer to peer, then the bootstrap nodes can be blocked and it’s no longer working.

    Even if it’s self hosted and not advertised, the adversary can run active probes to detect banned services and block it if it detects any.

    The only thing that can work reliably is something that can be concealed and can’t easily be detected.

    A simple HTTPS website that runs a small blog, forum or an image board, can have a lot of bot traffic, and human traffic that makes the traffic analysis hard, it also provides plausible deniability if someone asks why you visit that site often, you can say that you are playing games or browse images there. Such website can have a secret interface that can be used as an interaction point for secure chatting (in a store and forward manner), which responds only if the requests are cryptographically signed by the participants, otherwise the server can play dumb and show a 404 error. Therefore an active prober can’t easily detect that the website hosts that interface the first place, because they cannot produce a signed request unless they manage to compromise one of the participants.

    Threat analysis:

    • Obviously if the endpoints are compromised, all bets are off.
    • The certificate authority (CA) that issued the certificate for the website can be compelled to issue certificates for man-in-the-middle (MITM) observation and then the MITM-er can detect the secret interface. But nowadays this is difficult to pull off due to certificate transparency (CT), TLS clients can be configured to not accept the cert if it’s not logged by a CT provider, and domain owners can get an immediate alert if someone else issues a fraudulent and logged cert for their domains.

    Someone should make an app that works this way. Only one tech savvy person of the given group need to set this up (preferably someone who alredy have a website), then others in the group can be invited into it and can use it without much friction.


  • I think people should rediscover the beauty of doing things offline on a computer.

    I had a recent experience traveling on a train. A mother used YouTube to entertain her young kid with some children video. Every time there was an internet hiccup and the video stopped, the kid started crying…

    You don’t need a NAS and a streaming media server or anything in cloud to watch your favorite media, or to listen to your favorite music. You can simply put them on a pen drive and whenever you need the media, plug it in and watch/listen offline. Using an OTG adapter you can even plug it into your phone (at least for the duration of the the time while copy the needed files off it). Most people don’t need much more than this. And if that mother put the videos on the phone before the journey the kid would never cry.

    If you need a file server, you can use a basic Linux installation and enable SSH. Then you can transfer files over SSH using Filezilla or other SFTP client. For versioning you can use Git (it’s not just for programming), and the remote is just a directory on that Linux server where you have previously created a bare git repo.



  • I think the main requirement for general purpose computing is the decoupling of software from hardware and allowing modularity.

    The problem is that with Apple, Samsung, etc fully integrate the hardware and software in house, this means all the drivers and blobs can be kept in house secret.

    On the other hand a PC can be built by anyone from hardware components they choose. In order to make this work all the drivers and blobs for all the hardware components need to be public, and therefore can be integrated into the Linux kernel, allowing anyone to use an open source OS on their system.


  • Calmarius@lemmy.mltoPrivacy@lemmy.mlWhat are your alternatives to proton?
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    2
    ·
    edit-2
    11 months ago

    Incoming mail: my own server and my own domain (Postfix). Sufficient to receive confirmation mails and notifications.

    Outgoing mail: no good/reliable solution yet. I have to send personal e-mail very very rarely.

    Calendar: Tasks.org app, used offline (not synced).

    Drive: 1TB external HDDs. GPG encrypted backups of important stuff are uploaded regularly to one of the VPSes I have.

    VPN: Tor

    Password manager: KeepassXC (with backups at 3 places).

    Documents: Stored on computer, important ones are backed up. Confidential ones are stored on an encrypted LUKS volume which I only mount when I need something.

    In general things I need on the go (e.g Calendar) is on my phone, the rest is at home at my computer. If I need to move data between devices I simply use USB drives. I don’t need no cloud sync of anything.