bugbear

Oh, agreed. I would have to trust the VPN to actually not collect my data. That’s why I’m curious what VPNs people trust these days.

Tor is great. I used to run a middle/guard relay in the past, thinking about doing so again. The problem is that reuglar people shouldn’t run exit relay at home. And there aren’t many companies that would allow exit relays on their servers/in their datacentre. I get why, but that leaves only a (relatively) small number of exit relays and it’s so much easier for bad actors to control a significant number of them. :(

Out of curisoity, what would you recommend for privacy then?

Pidgin, maybe. I like it.

Edit: Oops, I might have misread/misunderstood what you were asking. If you’re asking about server software, I’d suggest XMPP :)

Though I know Matrix is very popular (as shown by people others suggesting it)

Yes. And again, patches aren’t a finite commodity.

Dibs on the patches? They are not finite.

LibreOffice?

I’m sorry, I don’t see the problem. They had to manually renew them before as well. Yes, it’s annoying to do it more often, but other than that there wouldn’t be much change

If they actually wanted to manipulate markets, they would use mainstream media.

Something about MIT licensed Grindr client tickles me lol. Great job!

I assume Google (on Grindr’s instructions) will take it down eventually, but I guess you’re prepared for that by trying to put it on F-Droid

Same. It’s enough for me (I don’t really have that much data) and just use rclone to back it up.

Yes, it’s possible. You don’t even need to buy a domain.

Okay, one last time. Those are two different issues.

The whole point of this thread was that it was possible to intercept the messages. That’s all. I doubt the OP needs to worry about that. But it’s possible as was stated by the other poster.

It’s like claiming that mail can’t be intercepted. Of course it can, but generally speaking you don’t have to worry about that. Though it would be foolish to claim otherwise (especially when one quick web search can show you cases when someone successfully pulled it off)

Good day.

Edit: typos

That was an example, the point is it is possible to intercept it. It’s been done in the wild - again that’s why there’s such need for other methods of 2FA.

Re: Apple or Google That’s even easier for them, because, you know, they’ve got access to the phone. Heck, famously Apple had a bug/feature where it stored text of notifications which affected Signal, too. In that case it was law enforcement who took advantage of that, though.

I wouldn’t go around sounding the alarm about SMS, because I don’t think many people send stuff that shouldn’t be plaintext via SMS. I like using SMS, actually, because how simple it is and you don’t need 4G for that.

But the fact is messages can be read one way or another. If you want to conspire, definitely use something else.

One of the first links that came up: https://arstechnica.com/information-technology/2021/03/16-attack-let-hacker-intercept-a-t-mobile-users-text-messages/

SMS/MMS is famously possible to intercept, by anyone, what are you talking about?

Otherwise it would be sufficient 2FA and we wouldn’t have to bother devising other methods.

I don’t know. Depends on the website you visit lol. DNS, WebRTC, there are certain ways.

I don’t know, maybe your settings. Or your screen size. Or your IP address is leaking through something.

In all fairness, overdoing it is also telling. Like the reason why Tor browser has everything standardised is because you hide in a crowd.

But not reporting anything is making you stand out as well, if you report uniquely little information about yourself with some statistics and guesswork you can be fingerprinted as well.

Sometimes people try to hide everything about themselves not realising that makes them unique and easier to identify.

yeah, every time I see gemini (the protocol) posts online I need to check whether it’s actually about the protocol or about the Google thing (and so just ignore it) 😞