Post AMFsiNEmPMEA3hvSpk by inference@plr.inferencium.net
(DIR) More posts by inference@plr.inferencium.net
(DIR) Post #AMFsiNEmPMEA3hvSpk by inference@plr.inferencium.net
2022-08-06T15:22:43.162313Z
2 likes, 2 repeats
It's funny to me how people think obscuring their IP address or home address is security, when it's literally the definition of security by obscurity. It's not difficult to discover where someone lives, given enough time. It delays the process, but it doesn't prevent it.Real security is assuming the entire world knows where you live, and your IP address, and using real security measures to protect your home, self, devices, and data.My neighbours and many other people have seen me enter and leave my house regularly, and even the postman knows where I live. It's impossible to have anonymity or even a high level of privacy in this aspect.For what reason should I care if someone comes to my house? My security will keep them out. If they threaten me or try something, I can just call the police. That's real security."But muh VPN!"Your VPN knows your IP address."But muh Tor!"While a lot more difficult, you can still be correlated to be using Tor. You can't prevent your connection to Tor from being obfuscated.It's the same reason I don't buy into the "Signal is bad because it requires your phone number" crap.What do you want me to do? Move house every 3 months when people inevitably discover where I live if they have enough time, money, and put enough effort in?Come to my house and we'll take a picture together; I really don't care if people know where I live, and this is coming from a hardcore security researcher.Another one:"Kerckhoff's principle applies beyond codes and ciphers to security systems in general: every secret creates a potential failure point. Secrecy, in other words, is a prime cause of brittleness—and therefore something likely to make a system prone to catastrophic collapse. Conversely, openness provides ductility."- Bruce Schneier (a leading cryptographer)It doesn't only apply to cryptography.If having your identity compromised leads to bad things happening, you're probably doing it wrong. No one outside of wars and such need that level of obfuscation and metadata hiding.
(DIR) Post #AMFtILw8ilwERxMa1I by LukeAlmighty@gameliberty.club
2022-08-06T15:29:13Z
4 likes, 1 repeats
@inference If you think the police is there to protect you, the public education worked well on you. :clownSad:
(DIR) Post #AMFtLGIM9Yf7oz8rdg by newt@stereophonic.space
2022-08-06T15:29:42.163278Z
0 likes, 0 repeats
@inference interesting. Now please state here your full name, home address, phone number, and details of every credit or debit card that you have.
(DIR) Post #AMFtMX7n4C9QJ5o2dc by inference@plr.inferencium.net
2022-08-06T15:29:57.845342Z
0 likes, 0 repeats
@LukeAlmighty I've called the police many times before. Worked for me. You must be in China or North Korea.I don't buy into conspiracies.
(DIR) Post #AMFtVOsD78UNK2kMiG by Zergling_man@birds.garden
2022-08-06T15:31:35.876367Z
1 likes, 1 repeats
@inference >Signal is bad because it requires your phone numberSignal is bad because it's fone-centric normie-tier shit.
(DIR) Post #AMFtWb35Kd9nNCP5w8 by inference@plr.inferencium.net
2022-08-06T15:31:47.423076Z
0 likes, 0 repeats
@newt JakeDurham, UK+447549902964Card details are security, so won't be posted here.This has always been public, too:https://inferencium.net/contact/signal.htmlSpam me and I block the number. I accept only Signal contacts on there, anyway.If you want to know my fulla address, I'll leave that for you to find out just out of spite.
(DIR) Post #AMFtYapv5mIxIHCKdE by inference@plr.inferencium.net
2022-08-06T15:32:10.065846Z
1 likes, 0 repeats
@Zergling_man It's also the best security you can get, as well as privacy without using onion networks.
(DIR) Post #AMFtYo4vrH2OMbK0Ku by Zergling_man@birds.garden
2022-08-06T15:32:12.756246Z
0 likes, 0 repeats
@inference *The number requirement is merely the clearest offence in that regard.
(DIR) Post #AMFtaBzESDZsnpJfOK by Zergling_man@birds.garden
2022-08-06T15:32:28.741416Z
0 likes, 0 repeats
@inference I'm content with gpg.
(DIR) Post #AMFtb9bum2ZpisrtNQ by inference@plr.inferencium.net
2022-08-06T15:32:37.975492Z
1 likes, 0 repeats
@Zergling_man Strong disagree, but you do you.
(DIR) Post #AMFtcr5ebRkqrWacoC by inference@plr.inferencium.net
2022-08-06T15:32:55.995908Z
1 likes, 0 repeats
@Zergling_man https://latacora.micro.blog/2019/07/16/the-pgp-problem.htmlNo thanks.
(DIR) Post #AMFtpPfLsQaFZXH7Sq by newt@stereophonic.space
2022-08-06T15:35:08.444476Z
0 likes, 0 repeats
@inference so you didn’t reveal any details whatsoever.But if you want this argument applied to signal, the problem with phone numbers there isn’t that somebody will know it. The problem is that you don’t control your phone number, your provider can take it away from you at any time. This has happened to me and this has happened to other people I know. Requiring a phone number for a service like this is just introducing a huge failure point into the mix.
(DIR) Post #AMFtsDgQssptHH7RJ2 by deavmi@gleasonator.com
2022-08-06T15:35:42.135888Z
2 likes, 1 repeats
In first world countries I would agree, but in ZA the police are useless and the head of police wants to disarm citizens. We are down bad. But yes, I will not generalize and there are some good folk out there - just - at least in South Africa - very few.
(DIR) Post #AMFttbqKXpqwUsPYfo by LukeAlmighty@gameliberty.club
2022-08-06T15:35:57Z
0 likes, 0 repeats
@inference I am sorry you had to call cops.Bud the entire "don't fall for conspiracy theories" is quite insulting.
(DIR) Post #AMFtvsOXyaPOPXUrRY by inference@plr.inferencium.net
2022-08-06T15:36:21.199588Z
0 likes, 0 repeats
@newt And you should be telling your contacts that via a backchannel.No one should be relying on a single service or even protocol.In IT, there is a saying:"If it doesn't exist in 3 places, it doesn't exist at all."
(DIR) Post #AMFtyB9FDu8V9UR9we by newt@stereophonic.space
2022-08-06T15:36:46.338924Z
0 likes, 0 repeats
@inference I mean, imagine if signal used your public ip for a login name. Sounds plain retarded, doesn’t it?
(DIR) Post #AMFtzI3H2bMIqxAria by inference@plr.inferencium.net
2022-08-06T15:36:59.760208Z
0 likes, 0 repeats
@newt No.
(DIR) Post #AMFuDXphAFkpqpcVHc by newt@stereophonic.space
2022-08-06T15:39:32.962112Z
0 likes, 0 repeats
@inference oh well.. if you don’t see any issue with id that you do not control, then I have no more argument to make.
(DIR) Post #AMFuH6cuG5q4dAKuX2 by inference@plr.inferencium.net
2022-08-06T15:40:12.942736Z
0 likes, 0 repeats
@newt I don't control if the government or landlord wants to tear down my house, either.
(DIR) Post #AMFuM26uTc444Xig8u by LukeAlmighty@gameliberty.club
2022-08-06T15:41:06Z
2 likes, 0 repeats
@inference Btw, I don't disagree. VPNs do not provide as good protection as people would expect, especially if there are still many human factors that could lead to a leak.But I do not expect police to be any kind of protection. They will come to your house as soon as you don't fit the plans of any mafian in your area.
(DIR) Post #AMFuMxggPHY2dztYJc by newt@stereophonic.space
2022-08-06T15:41:15.979521Z
1 likes, 0 repeats
@inference maybe you should consider that a problem as well.
(DIR) Post #AMFuRWJPcC5TBmBSpk by inference@plr.inferencium.net
2022-08-06T15:42:05.680079Z
0 likes, 0 repeats
@newt So, what do you want me to do?I already stated you should have multiple (3+) backup communication methods.
(DIR) Post #AMFuWRH9leVb16TTA8 by inference@plr.inferencium.net
2022-08-06T15:42:59.248714Z
0 likes, 0 repeats
@LukeAlmighty If that becomes an issue, I'll update my post to change it from police to something else. As of now, for me, it works.
(DIR) Post #AMFucj4CX9sPvrPd7A by newt@stereophonic.space
2022-08-06T15:44:05.582236Z
1 likes, 0 repeats
@inference you? I dunno lol.But I was trying to deconstruct your argument and it isn’t really sound. Basically, it devolves into “I have a problem X in that area and I can’t do anything about it, so it’s ok to have this problem X here as well”. Which isn’t really a good argument, if you think about it.
(DIR) Post #AMFujuClWM8eVHqFkG by inference@plr.inferencium.net
2022-08-06T15:45:23.929501Z
0 likes, 0 repeats
@newt If my house is taken down and I lose the postal communication method, I have Signal. If Signal goes down, I have the postal communication method. If both go down, I should already have third communication method, such as XMPP or Matrix.The more you have, the better.
(DIR) Post #AMFuneGKjiqKDXINW4 by Zergling_man@birds.garden
2022-08-06T15:46:05.988235Z
0 likes, 0 repeats
@inference Wow, what a load of bullshit. I'm not even motivated to test if their assertions about gpg are accurate, because their opinions are so fucking retarded.
(DIR) Post #AMFurh7q2ABgFsFdce by newt@stereophonic.space
2022-08-06T15:46:48.123825Z
0 likes, 0 repeats
@inference what if you publish something controversial on the internet and the people will find you from that phone number you posted above and come to kick your ass? Here’s an argument for concealing phone numbers.
(DIR) Post #AMFuvbaEa4h4E1OjTs by newt@stereophonic.space
2022-08-06T15:47:31.880845Z
2 likes, 1 repeats
@Zergling_man @inference well, PGP is really crap any way you look at it. I agree here.
(DIR) Post #AMFv0O2UMjAlfMtTcG by inference@plr.inferencium.net
2022-08-06T15:48:22.597999Z
1 likes, 0 repeats
@Zergling_man PGP should have died a long time ago. It's not how security should be done, and it's completely factual.Signify is the replacement for PGP signing, which does it right.age is the replacement for PGP encryption, which does it right.PGP was designed way before security was a real, important thing. No sane security person would ever design a system like PGP today.I'm hoping it becomes a thing of the past sooner rather than later. Even Debian is moving away from PGP, which is saying something. Gentoo also allows Signify, and GrapheneOS uses it, too (even completely dropping PGP).
(DIR) Post #AMFvCXPvKAL0E6eKBc by inference@plr.inferencium.net
2022-08-06T15:50:34.228394Z
0 likes, 0 repeats
@newt Everything I say is controversial. We shouldn't have to hide.If anything, I *want* to be ID'd for that, so I can be held responsible for what I say, and be a provable source for what I say.Life is not safe. Look at Julian Assange. If you want to make a difference, you have to face the possible consequences.Martin Luther King, Julian Assange, Edward Snowden... They all exposed their identities. It wouldn't have worked anywhere near as well if we couldn't pin claims to their identities.
(DIR) Post #AMFvFYuuClETkLaCwK by Zergling_man@birds.garden
2022-08-06T15:51:08.982931Z
0 likes, 0 repeats
@inference >debianlol, lmao>graphenelol, lmao>gentoo... Now I'll consider taking it seriously.
(DIR) Post #AMFvMr7ytaGKFnB24e by inference@plr.inferencium.net
2022-08-06T15:52:26.628074Z
1 likes, 0 repeats
@Zergling_man The lead dev of GrapheneOS even states on his personal site that PGP is obsolete:https://daniel.micay.dev/
(DIR) Post #AMFvPYAZq0ZEKCfxo0 by Zergling_man@birds.garden
2022-08-06T15:52:57.602674Z
0 likes, 0 repeats
@inference lol, lmao
(DIR) Post #AMFvfgnpVY9FjWjQp6 by newt@stereophonic.space
2022-08-06T15:55:50.232539Z
0 likes, 0 repeats
@inference oh.. have you ever heard of the martyr complex? It’s exactly that. Assange or Snowden ended up not making much difference whatsoever, but instead they have their lives ruined either partly or complete.But I think I understand your position. Thanks for this thread.
(DIR) Post #AMGsUnnt26KpYYpqsK by icy@h.icyphox.sh
2022-08-07T02:53:07Z
1 likes, 0 repeats
@inference @Zergling_man Signal being normie-tier is a good thing—makes for accessible E2EE communication that isn’t run by Facebook. Signal passes the “can my grandma set it up and use it?” test. Can’t say that about Matrix or Session or whatever else.
(DIR) Post #AMGsbTRX8CRiR7YqVk by inference@plr.inferencium.net
2022-08-07T02:56:10.436998Z
2 likes, 0 repeats
@icy @Zergling_man Security should be simple. The more complicated you make it, the more likely you are to fuck it up. Signal is leagues ahead in that aspect.And what's funny is most modern messengers use Signal protocol as their own base, including XMPP, Matrix, and WhatsApp.
(DIR) Post #AMHfNkR23REcpsPYRs by albi@fedi.skladka.net
2022-08-07T07:36:12.350553Z
0 likes, 0 repeats
@inference will you write your address here as well as your phone number and all your email addresses?
(DIR) Post #AMHfNkyM3XtEVE0AO8 by inference@plr.inferencium.net
2022-08-07T12:02:42.525763Z
1 likes, 0 repeats
@albi People have already asked for my physical address, and I gave it to them; close enough. I don't have to write it here, because it shouldn't be difficult to find my actual house when you know city-level, and it's fun to watch people try when I don't even try to hide it.Email addresses have always been public:https://inferencium.net/contact/pgp.htmlPhone number, too:https://inferencium.net/contact/signal.html
(DIR) Post #AMHg6QGVtKhrJOnGcq by benis@cawfee.club
2022-08-07T12:10:50.828577Z
0 likes, 0 repeats
@inference @albi >pgphyppocrip
(DIR) Post #AMHgC0orPblg87WaCO by inference@plr.inferencium.net
2022-08-07T12:11:48.715487Z
0 likes, 0 repeats
@benis @albi Don't use it other than Proton Mail. Signify can't be used for standardised emails, unfortunately. I recommended against using email for this reason.
(DIR) Post #AMHm2GOXFQ37GVwhOa by albi@fedi.skladka.net
2022-08-07T13:15:14.902358Z
0 likes, 0 repeats
@inference yeah, well I would need to search for itI would like it neatly in one place, you know, as if I were a bot with a database
(DIR) Post #AMHm2Go3iWSwXft5BA by inference@plr.inferencium.net
2022-08-07T13:17:15.942507Z
0 likes, 0 repeats
@albi My details are very much available on the UK government database, which can be accessed via a website. For only around 8 USD, I can find up to 6 people of my choosing, and all of their personal details, including address. It's not difficult, and it's entirely legal.Saying I don't care if you find out where I live doesn't obligate me to write it here. If you want to know city-level, I'm in Durham, UK.
(DIR) Post #AMHmVaqkH8q36T7tlg by albi@fedi.skladka.net
2022-08-07T13:20:10.107092Z
0 likes, 0 repeats
@inference why don't you just write it here then, if you don't care? it shouldn't make a difference hereI promise, I'm not as malicious as the worst of the internet
(DIR) Post #AMHmVbIOcKxMUE3yro by inference@plr.inferencium.net
2022-08-07T13:22:34.610446Z
1 likes, 0 repeats
@albi I don't care if you're malicious or not. There are many more malicious people I know in person than anyone on here ever will be.Again, I'm not obligated to write it here. If you think I care, I literally posted my personal phone number and email addresses which are entirely pinned to me as a person to my website, months ago, for the world to see.I'll probably get many more people asking for my full address due to my post (you're not the first), and I'm not responding to them all; I don't have time. As I said, I'm not obligated to write it just because I don't care if you know it or not.