Imnebuddy - pronounced “I am any buddy”

AuDHD, techie, commie nerd

  • 4 Posts
  • 21 Comments
Joined 5 年前
Cake day: 2021年3月17日
  • Imnebuddy@lemmy.mltoPrivacy@lemmy.ml•Telegram Hands U.S. Authorities Data on Thousands of UsersEnglish
    41·
    2 年前

    https://lemmy.ml/comment/15999861

    In the blog posts I read where the author, a security engineer, audited and/or reported vulnerabilities with two E2EE chat protocols commonly recommended as Signal alternatives–Matrix and XMPP–both had implemented half-baked solutions or refused to solve the issue at all in some regards, and both had evangelists that gave dismissive responses. The XMPP chud dev gave a laughably childish response, and the Matrix dev even admitted the team being aware of the olm vulnerability and deliberately refused to fix it for years. Not that Signal cultists are any better and not negating the legitimate security and trust issues with the Signal platform, but Signal is still a decent platform for most people’s threat model, though it would be nice if there was an alternative that could compete with Signal to recommend to most people instead. If you care about metadata resistance and your threat model involves high stakes if your assets are compromised, the blog author suggests Tor-based solutions such as Cwtch and Ricochet Refresh.

  • Imnebuddy@lemmy.mltoPrivacy@lemmy.ml•Telegram Hands U.S. Authorities Data on Thousands of UsersEnglish
    3·
    2 年前

    I’m with you there. This wasn’t meant as an argument against your statement. I brought up the issues regarding Matrix and XMPP as they are often recommended as alternatives to Signal, and after learning about this blog in a previous conversation I had about this topic, I thought it would be a good resource to bring up so people can be informed about those platforms and some alternatives that may be better than Signal while being metadata resistant.

  • Imnebuddy@lemmy.mltoPrivacy@lemmy.ml•Telegram Hands U.S. Authorities Data on Thousands of UsersEnglish
    2·
    2 年前

    Many Signal alternatives also have security issues of their own, often making them less secure than Signal. This includes Matrix and XMPP. In the blog post regarding XMPP+OMEMO, the author replies to a question about which would be better than Signal, Matrix, and XMPP with this suggestion:

    Anyone who cares about metadata resistance should look at Cwtch, Ricochet, or any other Tor-based solution. Not a mobile app. Not XMPP. Not Matrix.

    In regards to Ricochet, not having a mobile app version makes it difficult to recommend to less tech savvy people.

  • Imnebuddy@lemmy.mltoTechnology@lemmy.ml•What's, in your opinion, the android smartphone worth buying right now based on reparability, freedom of use and long term support?English
    91·
    3 年前

    This is not an Android phone, but I plan to get a PinePhone Pro and then maybe a flip phone for calls. I want to be able to tinker with Linux on my phone and have better access to Linux applications and utilities. It’s not the most secure option, but for me, I don’t need much from a phone, though it would be nice to have more freedom and capabilities with my device. Plus the physical keyboard accessory looks super nice. This may or may not help you, but I figured to share my thoughts just in case. I don’t know how knowledgeable you are with Linux, but you will need to be an intermediate Linux user (or willing and able to dedicate the time and effort to learn) and be willing to accept the limitations of the device, especially since it is not really meant for normal users yet. It’s meant for people that like to tinker and can contribute improvements and testing for the device. PINE64 makes a lot of cool tech, including the PineTime, Pinecil, PineNote, etc., and they are very focused on repairability as they sell individual parts for each of their devices and provide long-term support: https://www.pine64.org/

    I have had a OnePlus 6T that I have installed LineageOS on and have replaced the battery even though it is “non-removable”.

    Battery Replacement Prerequisites/Tips

    You need a heat gun to heat the adhesive to open the phone case. Then you need some spludgers/opening picks and a suction cup to open the case, as well as a precision screwdriver kit (essentially, get an iFixit kit for the opening tools). You will need some adhesive tape or some B-7000 or T-8000 to reattach the back cover. Be careful with the back cover as it is made of glass; I cracked mine by bending it too much and still have to get around to replacing it with the transparent cover I bought (which will look ugly with the replacement battery, but I figured it would be very functional as it will help me keep an eye on the battery before it expands too much and breaks the phone like my previous LG G5).

    I recommend this video to follow along for the battery replacement: https://yewtu.be/watch?v=KDJJ9FOQEXk

    I have had this phone for about 4-5 years now. If I need Android for any reason, I plan to use this device for those purposes.

    I also use a Unicorn Beetle belt holster case with the OnePlus 6T, and it’s survived so many falls because of it. It’s only around $10-20 on eBay (try getting an Otter for that price). You can still find a 256 GB model of the phone for less than $200 on eBay as well. I recommend any OnePlus phone up to the OnePlus 7T Pro. Their newer devices now have an encrypted battery, and the company itself sucks, but their older phones are good for rooting and custom ROMs and are pretty high powered and inexpensive for their flagship models, which is why I picked them when I was looking for a phone.