• 0 Posts
  • 22 Comments
Joined 3 years ago
cake
Cake day: June 8th, 2021

help-circle
  • I consider myself long time noob ;)

    Fedora for me because it’s rock solid, has cutting edge software, excellent documentation.

    I,ve been updating the same installation more than 15 times i think.

    Against: selinux is often overlooked when following guides written for Debian / ubuntu. So sometimes you pull out your hair.

    On the other hand. Podman is supposedly the new favorite kid on the block. Fedora is on the front here









  • On a related note? When my friend on proton send me (regular imap, openpgp) and several others (gmail, outlook) an email with all of us as recipients, it seems that proton cheats? I get to decrypt the message, where’s the others just read plain ø, unincrypted text.

    At first i thought this smart. But now i kind of realize how much of a nightmare this seems to be.

    On the other hand, i am not really sure how they do it? Is it to different mails, with fake headers? Or is it more like: if no encryption is available, show thisb (dentical) text instead?


  • Agree. A new EV needs to drive many years to offset the carbon emission during production of said car. The best thing you can do for the environment (if you want to drive a car) is to keep driving the car you already have. Second best it’s too but a used car. It’s horrendous. We give tax credits to incentives people to buy new conspicuous shit, while punishing those that keep their old, healthy cars.

    It’s totally Keyser Söze: the biggest trick the car industry pulled was convincing the public new, big EV cars were actually good for the environment.





  • I am no expert, so this is just my understanding: pgp encrypts the message, with the the recipients public key. Once the private key is compromised , bruforced or cracked, all messages are compromised. With signal, and all the other apps that uses signal protocol, it’s different. Here, the key is renewed often (i think for each message) and the key is device dependant. Therefore if the key is compromised no previous messages are compromised and neither are communications with other people. This is what e2e means, and pgp is not that. Also the key or self is harder to crack I think, but i am not sure how strong signals elliptic curve crypto is finished to a 4096 rsa key.

    Tldr: pgp is a simple encryption at rest, that can be cracked once and for all. Signal et. All is e2e encrypted and much harder to compromise one and for all.


  • Ohh@lemmy.mltoPrivacy@lemmy.mlPrivacy focused email recommendation
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    5 months ago

    My 2 ¢: Email is inherently not private. With tls you have encryption in transit, but as soon as the data hits the server no metadata is ever encrypted. With pgp you can encrypt the message content, sure, but not with many of the advanced features we expect from e.g. Signal and matrix. Therefore it doesn’t really matter if you use proton ot tuta, unless you exclusively mail other proton/tuta users.

    I am extremely happy with purelymail.com. extremely cheap and versatile. I also use mailfence.com but that’s only because i’d like to have two different servers for something as important as mail. Been a customer with purely for probably 3+ years . Mailfence probably 6+ years. Have seen two small outages with mailfence. None with purely.






  • Ohh@lemmy.mltoPrivacy@lemmy.mlSignal leaked random contacts to me!
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    7 months ago

    Well. I personally am very annoyed that i can’t choose a specific pin for signal. That means my kid can read my messages, because yes… Keeping password from a child is neigh impossible. But my pin for element, fairmail, telegram he don’t know.

    So i get a lot of the criticism. For me personally, it’s still a matter of trust. A future malicious molly version might eavesdrop. Signal will probably not do so.

    Encryption at rest on an unlocked phone is probably a hard problem. But if somebody is targeting me to that extent, i am probably toast anyways.

    I try to create enough usage so that journalists and activists can hide in the mob, and i can hide from fang.

    I use element, but do worry about the local server implementation and leak of metadata.