Open post Derek Morr @derekmorr@mastodon.social · 9mo ago Replying to @nemo@mas.to @signalapp #SilentWhisper needs to be patched 💡 ☑️ @nemo @signalapp it’s not trivial to fix. See this discussion from Signal https://github.com/signalapp/Signal-Android/pull/14463#issuecomment-3682415518 GitHub Anti timing attack features by sullystuff · Pull Request #14463 · signalapp/Signal-Android First time contributor checklist I have read how to contribute to this project I have signed the Contributor License Agreement Contributor checklist I am following the Code Style Guidelines...
Open post Derek Morr @derekmorr@mastodon.social · 7mo ago Replying to @joeneXtra@todon.eu @derekmorr@mastodon.social Why? @joeneXtra@todon.eu XMPP has no real privacy built in. Delta chat has antiquated encryption.
Open post Derek Morr @derekmorr@mastodon.social · 15mo ago Replying to @wilk@masto.bike @derekmorr@mastodon.social @aroom@tooting.ch @Mer__edith@mastodon.world A juridiction not under cloud act and compliant with GDPR for example. @wilk@masto.bike @aroom@tooting.ch many European countries are pushing very bad privacy laws.
Open post Derek Morr @derekmorr@mastodon.social · 16mo ago Replying to @rpgp@mastodon.social <p>New release: <a href="https://mastodon.social/tags/rPGP" class="mention hashtag" rel="tag">#<span>rPGP</span></a> version 0.16.0 🧰🔐✨</p><p><a href="https://github.com/rpgp/rpgp/releases/tag/v0.16.0" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">github.com/rpgp/rpgp/releases/</span><span class="invisible">tag/v0.16.0</span></a></p><p><a href="https://mastodon.social/tags/OpenPGP" class="mention hashtag" rel="tag">#<span>OpenPGP</span></a> implemented in pure <a href="https://mastodon.social/tags/Rust" class="mention hashtag" rel="tag">#<span>Rust</span></a>, permissively licensed</p><p>This release features streaming message support: Now rPGP can process arbitrarily large messages, with modest memory requirements.</p><p>It adds experimental support for the upcoming OpenPGP <a href="https://mastodon.social/tags/PQC" class="mention hashtag" rel="tag">#<span>PQC</span></a> IETF standard <a href="https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-pqc" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">datatracker.ietf.org/doc/html/</span><span class="invisible">draft-ietf-openpgp-pqc</span></a></p><p>This release also brings various improvements for key generation, support for X448/Ed448, and many minor fixes.</p> @rpgp@mastodon.social how is this project different from Sequoia?
Open post Derek Morr @derekmorr@mastodon.social · 15mo ago Replying to @dalias@hachyderm.io @Avitus@ioc.exchange @mansr@society.oftrolls.com @Mer__edith@mastodon.world Yes it's sus, but I imagine it's a significant source of well-diversified donations from users. Which is much better than being dependent on just a few big funders. I don't care that it's there as long as it's easy to ignore and not trying to dupe folks into treating it like an investment rather than just a way to transfer money. @mansr@society.oftrolls.com @Mer__edith@mastodon.world @Avitus@ioc.exchange @dalias@hachyderm.io it’s not a source of donations. It’s really a failed experiment,and I wish they’d remove it. Their token, MobileCoin, isn’t used anywhere. A year ago, Techlore made a video of them trying and failing to buy it. https://youtu.be/0DSGq9FQKU4 We Tried Signal's MobileCoin So You Never Have To...
Open post Derek Morr @derekmorr@mastodon.social · 15mo ago Replying to @rustoleumlove@mastodon.online @Mer__edith@mastodon.world should i turn off push motifications for Signal to make it even more secure? @rustoleumlove@mastodon.online @Mer__edith@mastodon.world message content isn't included in Signal's push notifications.
Open post Derek Morr @derekmorr@mastodon.social · 15mo ago Replying to @imkh@mastodon.social @rustoleumlove@mastodon.online @derekmorr@mastodon.social From my understanding, Signal's push notifications just act as a way to wake up the device. Then, the app fetches the encrypted content from Signal's server, decrypt it locally, and generate a local notification with the decrypted content. @imkh@mastodon.social @rustoleumlove@mastodon.online that's right. The push notification had an empty body. So all Google or Apple sees is that you got a message on Signal at a certain time.
Open post Derek Morr @derekmorr@mastodon.social · 15mo ago Replying to @mansr@society.oftrolls.com @Avitus@ioc.exchange @derekmorr@mastodon.social @Mer__edith@mastodon.world @dalias@hachyderm.io Such details are irrelevant. Any association with cryptocurrencies makes using the app feel a bit like eating at a restaurant that has good food but you know is a money laundering front for the mob. @Avitus@ioc.exchange @dalias@hachyderm.io @mansr@society.oftrolls.com @Mer__edith@mastodon.world you can’t even use it. A year or so ago, Techlore made a video where he tried to purchase tokens for it and couldn’t find an exchange that worked. Really, it’s much ado about nothing at this point.
Open post Derek Morr @derekmorr@mastodon.social · 7mo ago Replying to @joeneXtra@todon.eu on todon.eu @joeneXtra@todon.eu they aren't comparable.
Open post Derek Morr @derekmorr@mastodon.social · 15mo ago Replying to @aroom@tooting.ch @Mer__edith@mastodon.world could you move the foundation outside the USA? @aroom@tooting.ch @Mer__edith@mastodon.world what jurisdiction would you prefer?