Follow

Uspol, Signal 

The fact that these asshats charged with sedition were charged based in part based on Signal messages raises some questions. Although I bet it was likely just a fed lurking, or physical phone access.

But the recent resignation makes my primate brain want to play connect the dots.

Uspol, Signal 

@TheGibson At some point Signal *reduced* endpoint security on Android; eg I cannot screenshot my banking app or my car insurance as they use some protection to prevent that - Signal *used* to do the same but for about 2 years it removed this - also the desktop app can be easily monitored with physical device access.

It may however be more that Moxie realised "not very nice" folk are increasingly going to use Signal and decided to jump ship before shit hit the fan...

Uspol, Signal 

@vfrmedia @thegibson
Settings -> Privacy -> Screen Security -> Enable

Uspol, Signal 

@M0YNG @TheGibson

thanks; I didn't even know that setting had been made selectable as it used to be enabled by default but then changed in one version (with very little info given that this had happened!)

re: Uspol, Signal 

@thegibson My suspicion based on reading the indictment is that someone didn't delete their chats. Only 9 of the 11 defendants were charged with Tampering with Documents or Proceedings.

re: Uspol, Signal 

@thegibson There’s some pretty wild stuff in there. I don’t know, I’m beginning to suspect these people aren’t on the level.

re: Uspol, Signal 

@vortex_egg @thegibson Did you see the part where they tried communicating by emailing each other pictures of handwritten notes in cursive in order to avoid “digital tracking”?

re: Uspol, Signal 

@vortex_egg @thegibson I keep expecting to see my old boss getting arrested for taking part.

re: Uspol, Signal, Jan 6 

@drwho @vortex_egg @thegibson When the photos and ID shots were coming out last year, I was looking at them through my fingers, I tell you.

Bosses, family, exes? I didn't see anyone I knew though , and I think that's only down to how far Florida is from DC.

re: Uspol, Signal 

@vortex_egg @thegibson wouldn't that successfully defeat dragnet OCR content harvesting?

re: Uspol, Signal 

@alrs @vortex_egg i mean, plenty of tools can still harvest that data.

re: Uspol, Signal 

@alrs @vortex_egg also, I mean google indexes writing in pics, anx has for a long time... that might've worked in the days of Echelon and Carnivore...

re: Uspol, Signal 

@alrs @vortex_egg @thegibson maybe? But also these characters are a curiously "clever" at a superficial level and clueless at all other levels. I wonder if they think about scrubbing the EXIF data of the pictures they take of their handwritten messages before sending them, or using email service providers that aren't trivially tracked.

re: Uspol, Signal 

@vortex_egg @thegibson Some of the notes weren't destroyed. They were seized.

re: Uspol, Signal 

@drwho @thegibson Wait wait, the paper notes they wrote to avoid digital surveillance were seized and used as evidence?

re: Uspol, Signal 

@drwho @vortex_egg

I reiterate...

STRONG OPSEC

re: Uspol, Signal 

@drwho @vortex_egg @TheGibson I just literally LOLed for the first time since waking up. OMG.

re: Uspol, Signal 

@tek @drwho @vortex_egg @TheGibson who needs encryption with opsec that good

re: Uspol, Signal 

@drwho @TheGibson @rysiek @vortex_egg Next iteration: “the fox is in the henhouse”, and ROT-13’d.

re: Uspol, Signal 

@drwho @TheGibson @vortex_egg @rysiek Perfect. I’ll keep the original around as proof of ownership.

- Seditiontoshi

re: Uspol, Signal 

@tek @drwho @thegibson @rysiek @vortex_egg You need to think about I18N - Use rot8000

re: Uspol, Signal 

@drwho @vortex_egg @TheGibson “Some day this will be in my museum exhibit!”

re: Uspol, Signal 

@vortex_egg @thegibson

So we can conclude that: 2 out of 11 seditionists don't understand game theory.

Uspol, Signal 

@thegibson did i high ranking signal human leave the project?

Uspol, Signal 

@kemonine some guy named *checks notes* powerful bigfishnose (Moxie Marlinspike)

Uspol, Signal 

@thegibson how do they relate to signal? i tend not to follow their brand of stupid

@thegibson i wonder if they got burned like the encrypted email service in tx did back when

would connect a few dots...

@kemonine i doubt it... plea bargains are a helluva a drug.

Uspol, Signal 

@thegibson even if Signal is fine I still think I'd like something less centralized than both it and XMPP while still being mobile friendly.

And I think I might have figured how to pull it off, at least in theory. I wouldn't mind someone going over it and telling me if I missed an issue.

Uspol, Signal 

@TheGibson Wouldn't be surprised if it's just from the people they're chatting with leaking their messages. It seems like a lot of alt right people are pretty eager to snitch on each other, especially when they have something to gain from it like a plea bargain.

Uspol, Signal 

@montagsoup yep. That's the most likely way it went.

Uspol, Signal 

@TheGibson aren't those signal groups like, thousands of people large, and aren't these people the same people who filmed themselves insurrecting?

not that implicitly trust signal or anything but, like, we aren't talking about people who are typically careful

re: Uspol, Signal 

@teh_dude I said right there it was probably a leak or physical access... I agree with you.

re: Uspol, Signal 

@TheGibson yeah i was affirming that. because i also wonder about signal often it makes me want to connect dots as well

re: Uspol, Signal 

@teh_dude @thegibson

I can attest that I personally saw Signal accessing my GPS data when I was not using any GPS related features. I have since revoked its GPS permissions, obviously. It may be part of their super secret anti-spam measures opportunistically using GPS data if it can get it. It has not requested me to re-enable the permission.

re: Uspol, Signal 

@teh_dude @thegibson

Due to lack of time, I haven't looked into the code, nor compared the APKs from the website vs the in-app updayer vs their website vs a self-compiled version. But it's fair to say my reaction was very much 😧🤨😢

I had already started moving over to Matrix with people who are interested in switching, but this certainly motivated me to put more time into Matrix.

re: Uspol, Signal 

@adam @teh_dude @thegibson basic thought, but it might've been accessing Bluetooth, which can look like GPS access because of some Android thing. If not, carry on, just worth maybe mentioning.

re: Uspol, Signal 

@starless @teh_dude @thegibson

That's possible, as the warning I got was just that it was accessing my "Location", but I almost always have bluetooth turned off system-wide.

I enable location services for mapping and sometimes forget to turn it off when I am done, so that's why that wasn't also disabled system-wide.

Uspol, Signal 

@thegibson for all Moxie's faults, I don't think resigning relatively quietly would be the way he'd respond to that. If he were upset, he'd make noise. If he were pushed out due to agreeing with something the board didn't like, he'd make even more noise. Probably not in a particularly acceptable way, mind, but it would be unlikely to be quiet.

re: Uspol, Signal 

@calcifer @thegibson Yeah, I've actually been worried there'd a be a TrueCrypt replay if he ever took his toys and went home.

re: Uspol, Signal 

@thegibson I can see where you're going with that. It would be unlike what I know of Moxie to stay on if there is a backdoor, but physical access is likely and a lurking fed is even more likely IMO.

re: Uspol, Signal 

@jerephil Definitely so.

just made my ears perk up for a sec.

Sign in to participate in the conversation
hackers.town

A bunch of technomancers in the fediverse. Keep it fairly clean please. This arcology is for all who wash up upon it's digital shore.