@photovince anyone who doesn't trust a.#centralized, #proprietary #SingleVendor & #SingleProvider solution that demands #PII for no valid reason like @signalapp does!

@artfulmodder last time I checked @signalapp still demanded #PII in.the form of a #PhoneNumber, still peddled the #MobileCoin #Shitcoin #Scam and didn't move out of the #Cyberfacist #USA despite #CloudAct being nothing new!

• Not to mention #Signal is both able and willing to discriminate against users based off said PII. Just because they do it for "#Sanctions #Compliance" diesn't mean they ain't gonna change that nor that @Mer__edith (or anyone else at Signal) could be bribed or threatened to do so.

They are #centralized #SingleVendor & #SingleProvider and are thus a #SinglePointOfFailure per design!

• Unlike @delta (which is #PGP/MIME in a different UI) or #XMPP+#OMEMO (which you can use via @torproject / #Tor and connect to a Server that is an #OnionService.

IMHO "memory tagging" is the least of Signal's problems. To me they stench "#ControlledOpposition" just as hard as #ANØM and incompetence as hard as #EncroChat!

@threemaapp don't buy #proprietary #SingleVendor and/or #SingleProvider either!

• Use only #secure = #OpenSource #OpenStandards that hare #MultiVendor & #MultiProvider, like #XMPP+#OMEMO & #PGP/MIME!

@mit_scharf the problem with "threat scenarios" is that they tend to change quickly, non-consensual and without warning.

• Demanding any #PII [even by virtue of being correlateable through circumstances] to be able to use a service is inherently bad, espechally since there is no "legitimate interest" for that.

"#KYC" is the illicit activity! and #Signal acts as a controlled opposition by virtue of being a #proprietary, #centralized, #SingleVendor & #SingleProvider "solution" that subjects itself to a juristiction that has 0 #privacy laws and only #cyberfacism (see #CloudAct ) to boot...

• I find it more fatiguing and also expensive to try to workaround shite than to migrate folks to secure standards because that's a one-time investment that I'm willing to take vs. having to jump through hoops and paywalls to acquire a working #SIM (or #eSIM) anonymously and maintaining it.

It's just not in the cards TBH!

@Badener1848 @feda @ulrichkelber unabhängig davon sind beide #SingleVendor & #SingoeProvider, proprietär ubd nichz unabhängig verifizierbar.

• Anders als @monocles , @gajim , @delta & @thunderbird !

https://infosec.space/@kkarhan/114698420750672345

@pascal_f @kuketzblog @forthy42 @ulrichkelber

Eben! Ich betrachte es ferner als naiv angesichts #CloudAct, Anbietern proprietärer #SingleVendor / #SingleProvider-"Lösungen" wie @signalapp das vertrauen zu schenken!

• Und wenn das bedeutet dass Leute #Windows11 & Co. rausschmeißen dann ist dem so.

Gerade weil #ITsec, #InfoSec, #OpSec & #ComSec zusammenhängen und nur zusammen funktionieren...

@sodiboo @tauon @puppygirlhornypost2 @silly I don't think it's much of a "#freedom" on #iOS but rather that the few devices and OS versions in circulation, alongside everyone from #jailbreaker to #malware (espechally #govware #developers) want to crack it open result in way more personnel and money behind it.

• OFC the fact that the #Android experience is worse from that POV is the lack of #regulation re: #repairability and #openness that would make shit work. Most cheap #phones are done with even cheaper #SoC's by manufacturers who can't be assed (or frankly don't give a shit at all!) when it comes to #Linux #mainline support. (I mean, you've seen the video where @SexyCyborg demanded a vendor to give her the sourcecode as per #GPLv2 for her device?)

Granted @GrapheneOS does limit their support to devices that can comply with their #security standards.

• The issues are mostly caused by hostile app developers that specifically decided to knee-jerk their users / customers for no good reason.

I do wish for both vendors like #Fairphone to up their game and regulators like @EUCommission to actually push for more #transparency, #openness and #LongTermSupport of #Smartphones, because #ManufacturedEwaste like #SOYES, #WiKo, #Unihertz and others that ship #outdated #AndroidDevices and never even a single update are a major problem!

• I don't blame projects like @LineageOS that they can't cover every device & SoC even tho they propably have the widest compatibility, I just think that there needs to be pressure that manufacturers don't just vomit stuff on the market and let customers frustratingly figure out the rest.

I do have to give #Apple credit where it is due, and that is that #iOS does have consistency and accessibility nailed down very well. Something that they obviously are able being the "#BenevolentDictator" of a #SingleVendor & #SingleProvider - platform.

• Obviously since they are the #vendor for #hardware and the sole ["legitimate" / official] #distributor for any #Apps they do OFC cross-finance their relatively long #support with their 15-30% cut from #App #sales & #InAppPurchase|s they charge, which is why #AndroidPhones suffer the "#3DO syndrome": Needing to charge more since they only get to make money once with hardware sales and not after that, so there's no incentive for them to give a shit beyond "brand value" to care. #Google, #Samsing, #Fairphone and very few others do, but most don't as they close the books on the product once launched and sold out (angrily stares at Unihertz)...

Maybe one day the folks at @frameworkcomputer acquire Fairphone and decide to bring the same modularity to #Smartphones and get something done that makes it easy to maintain long-term and that even #GrapheneOS are willing to support.

• Until then the #Enshittification is ruining everything as usual...

@kuketzblog da widerspreche ich vehement.

Es gibt #proprietär|e #Silos welche qua #SingleVendor & #SingleProvider-Aufbau als #InformationBlackhole agieren (u.a. #WhatsApp, #Signal, #Threema, #Session, #Telegram, #discord, …)

und es gibt #OffeneStandards die #Wahlfreiheit zwischen #Clients, #Plattformen, #Servern und #Providern ermöglichen (u.a. #IRC, #Zulip, #RocketChat, ...) und echte #E2EE mit #SelfCustody aller Schlüssel ermöglichen (u.a. #XMPP+#OMEMO & #PGP/MIME)...

Natürlich steht es Menschen frei irgendeinen großen, zentralisierten Anbieter zu nutzen, nur wird dieser am ehesten zur #Enshittification neigen und mit #PII wie #Telefonnummern entsprechende Begierlichkeiten wecken!

@my_millennium @dbrgn @monocles @gajim Ist trotzdem #zentralisiert (#SingleVendor & #SingleProvider) und damit #proprietär und untauglich, weil gegen #KeckhoffsPrinzip und grundlegende #InfoSec & #ComSec verstoßend!

@stormii @debby okay.

Still a #centralized, #SingleVendor & #SingleProvider service that snitches on users if it ain't yet another #Honeypot like #ANØM...

@debby #Mumble, #IRC, #XMPP (+OMEMO = @gajim / #monoclesChat) & #Linphone (#SIP / #VoIP) are the better options. #NextcloudTalk also exist and @monocles as well as @Stuxhost offer that.

• #Signal and #Session are #proprietary, #centralized, #SingleVendor & #SingleProvider solutions!

• And #Matrix is just a shittier #XMPP+#OMEMO. Give @delta / #DeltaChat a try instead.

OfC #JitsiMeet and #WebCall are also great!

https://webcall.timur.mobi

@adisonverlice I think that's dangerous disinfo as @torproject actively works against attempts to fingerprint and track #Tor users.

• I do consider Tor more private than any #VPN simply becaise they can neither ban users nor identify them.

In fact, Tor has been designed with the explicit goal to circumvent #Firewalls and #InternetCensorship methods like #DeepApcketInspection.

• Which is why #OnionShare by @micahflee works so great!

As a matter of principle I'd never vouch for any #centralized, #SingleVendor and/or #SingleProvider solution of any kind, including #Session.

• Tor is sufficiently decentralized in that it is not only completely #OpenSource but has proven to not have SPOFs in the form of maintainers and is able to yeet proplematic folks (unlike #WikiLeaks!)…

@adisonverlice it's not just re: #Governments (tho #Project2025 explicitly endorses unsactioned comms to twart attempts at #FIOA or any #accountability for that matter), but individuals or any organization:

• If a system is #centralized as in #SingleVendor and/or #SingleProvider, it's inherently vulnerable.

And if #EncroChat got pwned, who's gonna guarantee @signalapp won't if it's actually secure or isn't an #InsideJob like #ANØM.

After all, both #Signal's Organization and key people like @Mer__edith are known to the authorities by more than just their legal name.

• What's gonna prevent #Trump from doing a "bag&drag" on her or getting his goons to put a gun on,the developers' heads and force them to,#d0x all users and #backdoor everything (if they didn't already got forced to have some "#LafwulInterception" gear in a closet like #Room641A...

After all, Signal can't pull the 5th and refuse to comply!

@bob_zim yeah. Seen it. in the writeup by @micahflee ...

I just hope to find any that ain't #NetLock'd / #SimLock'd to #Verizon and that these support more than #US-#LTE bands...

• Not shure if it needs a valid #SIM or just an #ICCID + #Ki on a #SIM to get going (cuz in #Germany it's hard [imported #SIM] to illegal [domestic SIMs] to get an anonymous SIM since 07/2017.

I just wish @eff wouldn't expect everyone to use #centralized, #SingleVendor & #SingleProvider services like @signalapp in the age of #CloudAct, cuz neither I nor anyone I'd trust would submit #PII to them like a #PhoneNumer as a matter of principle!

@menel @patrick and #Signal despite their #FUD and #MarketingLies is a very #cebtralized, #SingleVendor & #SingleProvieer system relying on #GAFAMs and their #API|s as well as neither allowing #SelfCustody nor #SelfHosting.

• Given the risks if being bound to #US law (incl. #CloudAct) it's just not an option.

Not to mention it's toxic followers that avt like cultists!