jim, to meta
@jim@social.openrightsgroup.org avatar

As announce messaging on FB, an Apple engineer explains why encryption matters to cloud based services including : basically, they inherently “favor attackers”:

“when it comes to security, centralized data repositories disproportionately favor attackers. The one-time breach of a company or service lets criminals steal the personal data for many—or all—of its users at once”

https://www.lawfaremedia.org/article/personal-data-in-the-cloud-is-under-siege.-end-to-end-encryption-is-our-most-powerful-defense

echo_pbreyer, to random German
@echo_pbreyer@digitalcourage.social avatar

🇩🇪Riesenerfolg gegen freiwillige : Auch auf den Druck meiner Klage hin stoppt Meta die verdachtslose deiner Direktnachrichten über Facebook und Instagram und führt sichere Verschlüsselung ein!

Wie das auch Kindern hilft: https://www.patrick-breyer.de/sichere-verschluesselung-statt-freiwillige-chatkontrolle-auf-facebook-und-instagram-schuetzt-unschuldige-und-unterstuetzt-die-strafverfolgung/

echo_pbreyer, (edited )
@echo_pbreyer@digitalcourage.social avatar

🇬🇧Huge success against voluntary 1.0: Under pressure from my lawsuit, Meta stops indiscriminate scanning of your direct messages via Facebook and Instagram and introduces secure encryption!

Why children benefit, too: https://www.patrick-breyer.de/en/secure-encryption-and-end-of-voluntary-chat-control-on-facebook-and-instagram-protect-innocent-users-and-support-law-enforcement/

majorlinux, to meta
@majorlinux@toot.majorshouse.com avatar

What took them so long?

Facebook Messenger enables end-to-end encryption by default - Desk Chair Analysts

https://dcanalysts.net/facebook-messenger-enables-end-to-end-encryption-by-default/

itnewsbot, to medical
@itnewsbot@schleuss.online avatar

Meta defies FBI opposition to encryption, brings E2EE to Facebook, Messenger - Enlarge (credit: Getty Images | Chesnot )

Meta has started ena... - https://arstechnica.com/?p=1989426 -to-endencryptionmessenger

openrightsgroup, to meta
@openrightsgroup@social.openrightsgroup.org avatar

A welcome move by Meta to rollout end-to-end encryption as default on Facebook and Messenger, despite political pressure from governments around the world.

This will protect the privacy and security of millions of people.

https://amp.theguardian.com/technology/2023/dec/07/meta-facebook-messenger-end-to-end-encryption

blueghost, to opensource
@blueghost@mastodon.online avatar

Jitsi Meet is an open source video conferencing platform, it is an alternative to platforms such as Zoom.

The Free Software Foundation provides a Jitsi Meet instance for their associate members, this instance has been enhanced for privacy.

An associate member is needed to create a conference room on this instance and anyone can be invited to participate.

Website: https://www.fsf.org/associate/about-the-fsf-jitsi-meet-server
Mastodon: @fsf

Yes, Proton Drive for Linux is currently not being actively worked on/update: they lack developers, see post

Update: i went to reddit because there was an AMA from proton . There, they said: *The only reason why our Linux clients are lagging from a development is simply that it is extremely difficult to hire Linux Desktop developers....

dazo, to protonprivacy in Yes, Proton Drive for Linux is currently not being actively worked on/update: they lack developers, see post

@Papanca @synapse1278

I've been testing out the rclone Proton Drive integration for a bit. As it is today, the rclone approach is currently too slow, especially using the "mount" approach which lets you access Drive files on-the-fly only downloading data as needed.

Using an "sync" approach (where data is stored both locally and in Drive) might be a better approach, unless you expect rapid syncing of files.

Considering the setup efforts, I cannot recommend Proton Drive for Linux in a productivity context.

Alternatives to Proton Drive on Linux there is @filen and Tresorit, which are both fully . I've been using both for a while and both are decent.

Filen is the cheapest alternative and feature wise pretty close to Proton Drive - but they have a sync client for Linux. They do not have a possibility to access files "on-the-fly"; all data must be synced locally. And sharing data via URL need to happen via the web portal. Sharing data between Filen users was read-only access last time I checked.

Tresorit is fairly expensive, but also a lot more feature rich, especially on the sharing side. The Linux client supports both synchronising files between local storage and the cloud as well as a "drive mount" where all files in the cloud are available and only downloaded once you access it - or uploaded directly if you store something there.

Both Filen and Tresorit are fairly efficient in regards to uploading and downloading data via their sync clients. Using the web portal is slower, especially on larger files. This is naturally and not unexpected; the data is decrypted first on your device when the data has been downloaded from the cloud storage. Proton Drive is no different here.

Filen is a more properly open source based product. Tresorit is non-open source and built on top of Microsoft Azure services.

ianonymous3000, to privacy
@ianonymous3000@mastodon.social avatar

Even with Advanced Data Protection activated on ,
Apple can still access your iCloud Mail, Contacts, and Calendar. The encryption applies in transit and on their servers, but it's not end-to-end. Apple holds the keys.

https://support.apple.com/en-us/102651

retr0id, to random
@retr0id@retr0.id avatar
kkarhan,
@kkarhan@mstdn.social avatar

@retr0id And that's why I don't trust @signalapp / , , , , etc.

Only & of allow for real and thus ...

my_actual_brain, to linux
@my_actual_brain@fosstodon.org avatar

I've been wavering on choosing a cloud provider to sync my data with. I really was hoping to use , but I really need a client. I was using dive, but I really do not like how their system works.

So, I am going to go with I am not particularly excited to use them, but just yesterday, my wife needed an ID which she did not have. If my data was in the , I could have just shown it on the phone.

@protonmail

blueghost,
@blueghost@mastodon.online avatar
Mehrad, to random
@Mehrad@fosstodon.org avatar

I'm trying to export all my emails from @Tutanota, but guess what, it keeps "crashing" and asks me to report the bug.

Tutanota is no different than any other vendor-lock-in platform. One of the side-effects (read "reasons") that user cannot use any client other than Tuta's is that the only way to export your data is via their own client. Something that conveniently crashes left and right without clear reason or without telling which email is causing the issue.

blueghost,
@blueghost@mastodon.online avatar

@Mehrad @Tutanota
TUTA FOLDER DELETION 1/5:
A folder that is deleted containing at least one message is moved to a Trash subfolder, selecting "Clear folder" to permanently delete individual messages in the Trash folder does not affect the subfolders.

When a folder is deleted and moved to a Trash subfolder, the Trash icon changes and a plus sign appears in the lower right portion of the icon.

blueghost,
@blueghost@mastodon.online avatar

@Mehrad @Tutanota
TUTA FOLDER DELETION 2/5:
Select the Trash icon with a plus sign and a list of subfolders will appear, permanently delete a folder by selecting the ellipsis icon to the right of the folder name and then select Delete.

blueghost,
@blueghost@mastodon.online avatar

@Mehrad @Tutanota
TUTA FOLDER DELETION 3/5:
This will remove the subfolder from Trash and the list of folders where a message can be moved to, this is where you were seeing folders appear that you thought were permanently deleted. The dot at the beginning of the folder name indicates it is a subfolder, in this instance it appears to be a subfolder of Trash.

blueghost,
@blueghost@mastodon.online avatar

@Mehrad @Tutanota
TUTA FOLDER DELETION 4/5:
Folders that have been deleted and moved to a Trash subfolder will appear in the list of folders where a message can be moved to with a dot in front of the folder name and appear directly below the Trash folder. Messages can be moved to these subfolders.

blueghost,
@blueghost@mastodon.online avatar

@Mehrad @Tutanota
TUTA FOLDER DELETION 5/5:
Folders and subfolders that have not been deleted will appear in the list of folders where a message can be moved to and appear directly below the Spam folder. A subfolder will have a dot(s) at the beginning of the folder name.

Permanently deleting a folder containing at least one message is a two step process.

mattcen, to apple
@mattcen@aus.social avatar

's finally agreed to support alongside (but not as a replacement for) as of later next year: https://9to5mac.com/2023/11/16/apple-rcs-coming-to-iphone/

I've not been able to find much info about how the RCS standard works and whether it's end-to-end encryption; Apple seems to think that its encryption needs to be improved to bring it up to iMessage's encryption standard.

claims they support (https://support.google.com/messages/answer/10262381), but it's unclear if that's built into RCS, or something else on top of it.

mjgardner, to apple
@mjgardner@social.sdf.org avatar

has no intention to support ’s proprietary extensions to that allow for end-to-end [, which is a feature of Apple's ]. […] Apple caving and deciding to support [RCS] will expand, rather than contract, the amount of messaging that is not E2EE.”

https://daringfireball.net/linked/2023/11/16/apple-rcs

Your move, Google. Work with Apple and the Association to standardize RCS E2EE.

0x58, to Europe

🇪🇺 🥳

On 14th November, Members of the European Parliament’s ‘Civil Liberties’ committee voted against attempts from EU Home Affairs officials to roll out mass scanning of private and encrypted messages across Europe. It was a clear-cut vote, with a significant majority of MEPs supporting the proposed position.

https://edri.org/our-work/eu-parliament-committee-rejects-mass-scanning-of-private-and-encrypted-communications/

majorlinux, to android
@majorlinux@toot.majorshouse.com avatar

Who is this really for?

Nothing has iMessage like Apple - Desk Chair Analysts

https://dcanalysts.net/nothing-has-imessage-like-apple/

jjtech,

@majorlinux Unfortunately, the problem with is that it does not have true : they log into your Apple ID on a Mac Mini in a datacenter, and then decrypt and re-encrypt the messages on that Mac. The messages are encrypted in transit, but it is not end-to-end in any manner. This was confirmed in MKBHD's video.

This is kind of disappointing to me, because true E2E encryption is possible, I worked on my project which implements the protocol from scratch (no Mac), bought it so hopefully should be available in the future.

pimterry, to random
@pimterry@toot.cafe avatar

https://tuta.com/blog/chat-control is really fantastic news.

Great not just to see sanity prevail over and , but especially to see expert & community feedback being clearly received and used, to see a parliament explicitly reiterate support for privacy and encryption, and to see all that getting a good broad majority behind it.

Imo, the EU might consider dubious ideas at points, but the various layers are mostly quite good at collecting feedback and dropping bad plans.

Polynomial_C, to random Catalan
@Polynomial_C@mastodon.social avatar

Micro$hit Teams vs

kkarhan,
@kkarhan@mstdn.social avatar
khaleesicodes, to random German
@khaleesicodes@eupolicy.social avatar

Und die Abstimmung zur ist durch, wie erwartet.
Es wurde für den bereits bekannten Kompromisstext gestimmt und für ein direktes Mandat im Trilog.
Was heißt das? 1/x

khaleesicodes,
@khaleesicodes@eupolicy.social avatar


ist zumindest in interpersoneller Kommunikation geschützt. Allerdings werden verschlüsselte Hosting Services nicht ausgenommen, hier gibt es also Verbesserungsbedarf 5/x

vascorsd, to MLS
@vascorsd@mastodon.social avatar

RFC 9420 – A Messaging Layer Security Overview
https://www.thestack.technology/rfc9420-ietf-mls-standard/

openrightsgroup, to UKpolitics
@openrightsgroup@social.openrightsgroup.org avatar

“If enacted, these reforms [to the Investigatory Powers Act] pose a threat to companies’ ability to keep our data safe and increase the risk of criminal attacks. We urge the government to engage with civil society and tech companies, and to reconsider these potentially dangerous proposals.”

🗣️ ORG Programme Manager @abigail

https://www.digit.fyi/uk-gov-to-expand-controversial-snoopers-charter/

Decentralize, to privacy
@Decentralize@dt.gl avatar

Signal: New Features Roll Call: Fall 2023 https://signal.org/blog/new-features-fall-2023/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • tester
  • thenastyranch
  • magazineikmin
  • InstantRegret
  • Youngstown
  • slotface
  • hgfsjryuu7
  • mdbf
  • vwfavf
  • kavyap
  • tsrsr
  • ngwrru68w68
  • PowerRangers
  • DreamBathrooms
  • Leos
  • everett
  • Durango
  • osvaldo12
  • khanakhh
  • ethstaker
  • rosin
  • cubers
  • tacticalgear
  • GTA5RPClips
  • normalnudes
  • cisconetworking
  • modclub
  • anitta
  • All magazines