• 3 Posts
  • 499 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle
  • It’s difficult to know that for sure, which is why (e.g.) the US government wants to make sure that there is domestic chip manufacture with a completely controlled supply chain to make hardware for classified communications. It can help to consider the difference between targeted surveillance (spending millions to tap the President’s phone, to get big juicy national secrets) and dragnet surveillance (tapping everybody’s phone so that you can have dirt on Joe Schmoe if he does something interesting later, even if he is of no particular interest right now). Hardware backdoors would be used mostly for targeted surveillance.

    Stuff like VPN’s and encrypted apps can be of considerable help against dragnet surveillance, which is what the civil privacy community mostly cares about. If you think you might be a subject of targeted surveillance, you have to be much more paranoid. Not just hardware backdoors in your computer, but suspicious white vans on your street, microphones in your flower pots, FBI agents under your bed, the whole bit.

    There are some countermeasures you can take against hardware backdoors (electromagnetically isolate a computer from the network and transfer data from it by floppy disc or similar) but basically you’re in a different world if you’re dealing with this.

    You mght like the book “Security Engineering” by Ross Anderson (older editions free online and still very good: https://www.cl.cam.ac.uk/archive/rja14/book.html and scroll down). It goes into this stuff, has lots of good overviews even if you gloss over the technical parts, and will generally help you see clearly in the topic.


  • I use TB under Debian and there is a tray icon and an arrival notification, poll time of maybe a few minutes, seems fine. Showing the # of messages in the tray icon could be sort of handy I guess, though I had never thought about it before and didn’t miss it. Basic features = shut off the “email contains remote content” banner or “spam filter thinks this email is spam” (I can recognize spam for myself). I just want a preference that permanently disables remote content without throwing banners at me. And eliminate the client side spam filtering completely since I have that on the server side, and can manually flag any that gets through. Plus various other stuff like that. Yes, get rid of the calendar and contacts stuff. Biggest feature needing significant code changes: make message search not suck.







  • The initial post is a somewhat incomprehensible rant but I think the objection is that any number of skeezy websites all have domains pointing to the same Cloudflare IP. So when a malware app opens a TLS connection to one of those domains, the shared IP doesn’t tel you anything, and the ECH prevents you from seeing with Wireshark just whose home the malware is phoning. You have to resort to more drastic methods like intercepting DNS. Better yet, don’t run malware.


  • Nextcloud might handle what you want. There are a zillion places that offer hosting for it, or you can self-host it. MediaWiki is another possible choice, that despite the name is more document oriented and less media oriented than NextCloud is. Again, you can self-host, or there are commercial hosts for it. Lots of VPS providers also offer one-click installers for it. I haven’t run a MediaWiki instance myself, but am familiar with it as a user through editing Wikipedia. I’ve run Gitit, which has a similar UI, but is backed by a Git repo.