this post was submitted on 12 Aug 2023
373 points (95.8% liked)

Privacy

32120 readers
1056 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

We are starting to see for quite some time big tech trying to get the internet under their control. We have seen half of the internet starting to block proxies. Tor is not usable in the normal internet anymore. More and more services require a government issued id for their account.

And now Google went ahead and did the final blow by announcing WEI. If that gets integrated on all popular sites, there will be no more open web. We try to fight back as much as we can, but the bitter truth is most people are already 'good little pets' of these giants.

Most of the people, are not just okay, but want these big brothers to handle everything for them. They want to get their finances, entertainment, social medias, government services all done for them by these giants without them even knowing. They are ready to live as big brother says. Half of them already don't have individual opinions.

Although the fight still continues, It's time to think about plan B. What if most of internet is blocked for us privacy conscious people? We need alternatives. It's time to build an ecosystem that we people can use without the help of popular services. There are already a lot of softwares, but we need to fill the gaps fast. We need an open hardware, accessible and a fully open software stack including everyday apps for most of our needs and entertainments. On PC it's almost there. Mobile terribly lacks in the lowest levels, but have some apps that can help.

PC

For PC, we can still install linux on most devices, so linux. For browsing, we can use firefox or any forks of that. Proton and skiff are good alternatives for basic email, storage etc. For social media we have federated systems like lemmy, services like odysee, mewe etc. Share services that you think should be in this list

Mobile

For mobile, we miss variety in hardware section. One option might be pinephone or other linux phones. Other option might ironically be Pixel. For OS, we can use graph eneOS, cal yx OS, linux based OS etc. But setting it up is currently very hard. For browsing, firefox for android is good (I use it) which also has extensions support. Above mentioned services like proton, skiff, lemmy, odysee, mewe etc. has android apps. For IM we have briar, Session, simpleX etc. Share services that you think should be in this list

Help me document a full recommended ecosystem. Maybe we can have a recommended guide. Maybe there are better options. Discuss.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] snowfalldreamland@lemmy.ml 3 points 1 year ago* (last edited 1 year ago) (1 children)

They had some serious cryptography issues (including no perfect forwards secrecy!!!) but they have promised to fix that. I've not yet seen any paper analyzing the new protocol. But maybe it could be good?

Edit: Here's a paper with some of the issues: https://www.research-collection.ethz.ch/bitstream/handle/20.500.11850/623004/main.pdf

They conclude that:

The seven attacks we have presented highlight fundamental weaknesses in the design of Threema. Indeed, the Threema protocols lack basic properties that are nowadays considered de rigueur for a messenger app to be regarded as secure: forward secrecy with respect to a malicious server, and protection against replay, reflection, and reordering attacks. We believe that the cryptography in Threema has design flaws that need to be addressed in order to meet the security expectations of its users

They have redesigned their protocol since then but again i have yet to see a third party look at it but TBH i haven't looked into it.

perfect forward secrecy was added some time ago and is the default now.