• 4 Posts
  • 17 Comments
Joined 3 years ago
cake
Cake day: April 5th, 2022



  • tavutoPrivacy@lemmy.ml*Permanently Deleted*
    arrow-up
    17
    arrow-down
    0
    ·
    3 months ago
    link
    fedilink

    If you’re using Mozilla’s level of endorsement as a metric, note this prominent disclaimer on the addon’s page:

    ⚠️ This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing.



  • tavutoPrivacy@lemmy.mlany xmpp user ?
    arrow-up
    5
    arrow-down
    0
    ·
    6 months ago
    link
    fedilink

    Yep. It works and it’s awesome. I use conversations on android devices and dino and gajim on desktops, various family members use siskin on iOS.

    With zero app or server-software or provider lock-in, and an actual in-practice diversity of apps and providers, the whole thing seems pretty immune to enshittification.



  • [alt-text for the vision-impaired] Image appears to be a twitter post from Craig Murray posted on 2023-10-14: “To be entirely plain. I have always viscerally opposed war. I have dedicated my life to conflict resolution and reconciliation. But in the coming Gaza genocide, every act of armed resistance by Hamas and Hezbollah will have my support. If that is a crime, send me back to jail.

    Hmm. Could be seen as a rather outlandish thing to say in the immediate aftermath of 2023-10-07, but in hindsight with what we know now in terms of what atrocities the Israeli military forces have brought upon the people of Gaza since that attack on Israel, it seems a reasonable statement to support armed resistance against the coming episode of genocide which indeed materialised and continues today.



  • Well within the budget of a private investigator or burglar or peeping-tom or abusive ex-partner.

    No need to scale; plenty of privacy/security incursions don’t require mass-surveillance.

    That said, I’d suggest that the attack does scale economically . Think war-driving but with one of these setups – cruising around in a van through a dense neighbourhood collecting short clips of cctv footage looking for something of interest.


  • [] the attack is an extremely expensive nation state level operation that doesn’t scale.

    About $250 at most. Quoting the linked page:

    Below is a list of equipment we used for the experiments.

    • (1) Software Defined Ratio (SDR): Ettus USRP B210 USRP, ~$2100.
    • (2) Low Noise Amplifier (LNA): Foresight Intelligence FSTRFAMP06 LNA, ~$200.
    • (3) Directional Antenna: A common outdoor Log-periodic directional antenna (LPDA), ~$15.
    • (4) A laptop, of course.

    Note that the equipment can be replaced with cheaper counterparts. For example, USRP B210 can be replaced with RTL-SDR that costs ~$30.

    To reproduce the attack: our GitHub repository provides the codes and instructions for reproducing and understanding the attack. We have prepared a ready-to-use software tool that can produce real-time reconstructions of the eavesdropped videos with EM signal input from the USRP device.








  • tavutoPrivacy@lemmy.mlEtherpad or Cryptpad
    arrow-up
    1
    arrow-down
    0
    ·
    8 months ago
    edit-2
    8 months ago
    link
    fedilink

    To be clear though: by E2EE here I mean browser-side encryption with zero-knowledge on the server side.

    Etherpad is still encrypted in transit with https; only the server can snoop.

    Cryptpad and other web-based E2EE services can still be completely compromised server-side by serving malicious code to the browser, and practically the user would never know.


  • tavutoPrivacy@lemmy.mlEtherpad or Cryptpad
    arrow-up
    7
    arrow-down
    0
    ·
    8 months ago
    edit-2
    8 months ago
    link
    fedilink

    Cryptpad:

    • Full-on google docs / office365 / libreoffice type replacement with collaboration.
    • E2EE
    • The complexity means it doesn’t work well on mobile, takes a while to load on a slow connection, more frequent bugs. (3.5 MiB page transfer)
    • Self-hosting is complicated.

    Etherpad:

    • A competent collaborative rich-text editor. Doesn’t do spreadsheets or presentations or [].
    • Not E2EE (you need to trust that the server a bit more).
    • Lightweight, works on slower connections, works alright on mobile. (1.7 MiB page transfer)
    • Self-hosting quite simple.

    PrivateBin:

    • Super-simple plain-text/markdown pastebin. No editing possible once saved.
    • E2EE
    • Very small. Works fine on slow connections and mobile. (0.2 MiB page transfer)
    • Self-hosting very simple.