[ale] Secure Family Comms

[Jim Kinney]

On Thu, 2017-03-23 at 10:24 -0400, Dustin Strickland wrote:
> Signal bring compromised isn't even a question. WL just put out
> documents that show the CIA's capability to foil the encryption on
> all secure messaging services for mobile. They use os-level exploits
> and intercept communications before they're encrypted by the app. I
> no longer go out of my way to protect my privacy because it just
> doesn't help. They've ruined cyber security.

Not so. It's a game of "whack-a-mole". In order to bypass the device
encryption, the device must be compromised. For most devices a wipe and
reinstall periodically will reduce the threat exposure. It still does
boil down to "do you really OWN that device or are you just allowed to
use it for a fee".
For microsoft and apple users, there's pretty much no hope. Apple talks
about user security and stands up to federal demands but reserves all
real control for apple.
Microsoft makes no claims to user security and a track record that back
it.
So it's up to the Linux and BSD crowd. I can't lump android into that
if I can't get the source for all the OS stack on my phone. Sure, we
have cyanogen (or what's left of it) but getting that installed with
the "WTF DOES THIS DO?!?!?" binary blob that controls the hardware is
an unpleasant feeling.
> On Mar 23, 2017 10:00 AM, "DJ-Pfulio" <DJPfulio at jdpfu.com> wrote:
> > Signal is a huge target. I have ZERO doubt that all that traffic is
> > 
> > being captured for later decryption. A weakness WILL BE FOUND and
> > 
> > exploited, if not in the program, in the OS hosting it.
> > 
> > 
> > 
> > If you are a dissident group trying to alter a government, might
> > want to
> > 
> > keep looking for a less popular solution. Use a little trade-craft
> > in
> > 
> > your OpSec.
> > 
> > 
> > 
> > I believe that a false sense of security is worse than believing
> > 
> > everything is non-secure, and acting appropriately.
> > 
> > 
> > 
> > But if you are sharing secret family recipes, it is probably good
> > 
> > enough.  The more traffic on the internet that is encrypted, the
> > better.
> > 
> > Easier to hide a raindrop in a rainstorm than hiding a single
> > balloon on
> > 
> > a sunny day.
> > 
> > 
> > 
> > Don't believe all the marketing hype - even the stuff I quoted
> > below
> > 
> > about retroshare.  Do some packet sniffing. See what leaks.
> > 
> > 
> > 
> > For example, how many people are/were using Lastpass? How many
> > leaked
> > 
> > credentials got out due to the latest flaw with FF/chrome plugins.
> > An
> > 
> > online password manager just seems foolish to me.  I prefer my
> > password
> > 
> > manager NOT to having any network code.
> > 
> > 
> > 
> > 
> > 
> > On 03/23/2017 09:21 AM, Ted W. wrote:
> > 
> > > If all you want is a way to securely communicate with family use
> > Signal.
> > 
> > > It's not for email but it makes a great Apple Messages
> > replacement. My
> > 
> > > wife and I now use it since I moved off iOS and back to Android.
> > It's
> > 
> > > about a simple as it can get for this sort of thing.
> > 
> > >
> > 
> > > -Ted
> > 
> > >
> > 
> > > On Wed, Mar 22, 2017 at 03:31:34PM -0400, DJ-Pfulio wrote:
> > 
> > >> On 03/22/2017 02:00 PM, Alex Carver wrote:
> > 
> > >>> I want to see something that is easy for my parents to use.
> > 
> > >>
> > 
> > >> Might be worth looking at RestroShare.
> > 
> > >>
> > 
> > >> http://retroshare.net/
> > 
> > >> "Retroshare creates encrypted connections to your friends.
> > Nobody can
> > 
> > >> spy on you. Retroshare is completely decentralized. This means
> > there are
> > 
> > >> no central servers. It is entirely Open-Source and free. There
> > are no
> > 
> > >> costs, no ads and no Terms of Service."
> > 
> > >>
> > 
> > >>
> > 
> > >> _______________________________________________
> > 
> > >> Ale mailing list
> > 
> > >> Ale at ale.org
> > 
> > >> http://mail.ale.org/mailman/listinfo/ale
> > 
> > >> See JOBS, ANNOUNCE and SCHOOLS lists at
> > 
> > >> http://mail.ale.org/mailman/listinfo
> > 
> > >>
> > 
> > >>
> > 
> > >> _______________________________________________
> > 
> > >> Ale mailing list
> > 
> > >> Ale at ale.org
> > 
> > >> http://mail.ale.org/mailman/listinfo/ale
> > 
> > >> See JOBS, ANNOUNCE and SCHOOLS lists at
> > 
> > >> http://mail.ale.org/mailman/listinfo
> > 
> > 
> > 
> > 
> > 
> > --
> > 
> > Got Linux? Used on smartphones, tablets, desktop computers, media
> > 
> > centers, and servers by kids, Moms, Dads, grandparents and IT
> > 
> > professionals.
> > 
> > _______________________________________________
> > 
> > Ale mailing list
> > 
> > Ale at ale.org
> > 
> > http://mail.ale.org/mailman/listinfo/ale
> > 
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > 
> > http://mail.ale.org/mailman/listinfo
> > 
> > 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
-- 
James P. Kinney III

Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain

http://heretothereideas.blogspot.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20170323/770f47c5/attachment.html>