Post APyoj9YRV0YOhjL9P6 by unmellow@linuxrocks.online
(DIR) More posts by unmellow@linuxrocks.online
(DIR) Post #APyoj8sG1qoGatbSeO by malin@linuxrocks.online
2022-11-25T23:35:50Z
0 likes, 0 repeats
Anyone know any good privacy guides for protesters in Iran?Needs to be normal stuff, not 'how to connect to xmpp using torsocks'.
(DIR) Post #APyoj9YRV0YOhjL9P6 by unmellow@linuxrocks.online
2022-11-26T00:30:41Z
0 likes, 0 repeats
@malin I would recommend session, but just to be clear it is by nature built on top of oxen (cryptocurrency) and I want to make that clear upfront so it doesn't come as a surprise. Other than that it's onion routed with no central servers so oxen foundation in theory has nothing to turn over, and all it's primary features are free.
(DIR) Post #APyoj9wC4hYJtOS7QO by malin@linuxrocks.online
2022-11-25T23:37:10Z
0 likes, 0 repeats
I wonder if Facebook is a better messenger than Signal. "Signal" kinda screams "I am a protestor", while Snapchat doesn't really say anything, and it seems unlikely that the Snapchat people are going to dump the data in the wrong places.
(DIR) Post #APyojAKebl7P7FteYC by Linux_in_a_Bit@linuxrocks.online
2022-11-26T01:16:16Z
0 likes, 0 repeats
@unmellow @malin I'd recommend @briar instead, much better for offline communication, also uses TOR, and doesn't do the crypto stuff.
(DIR) Post #APz7cC2Fm8QTV5g8pc by malin@linuxrocks.online
2022-11-26T04:47:57Z
0 likes, 0 repeats
@Linux_in_a_Bit @unmellow @briar given the aim is to avoid suspicion, and that the ISP can monitor DNS, I'm thinking WhatsApp and Facebook would be safer. I don't think the crypto bit matters for serious situations unless it concerns evidence left behind.
(DIR) Post #AQ05xAbyG7gaPoDhqa by Linux_in_a_Bit@linuxrocks.online
2022-11-26T16:04:00Z
0 likes, 0 repeats
@malin @unmellow @briar Well Facebook isn't encrypted client to server (well https, but it's been broken) and I believe Iran has implemented packet searching so that wouldn't be an option.Whatsapp could work, but again, foreign internet blackouts.Either way they'd have to do some suspicious stuff to access it anyway.Briar is good because it works entirely offline, and if they don't connect it to the internet at all and use a panic button app, they should be alright.This actually remind me of this in a way: https://infosec.exchange/@r000t/109399974063380630
(DIR) Post #AQ0Tzz0IGpQkBQTGG8 by malin@linuxrocks.online
2022-11-26T20:33:31Z
0 likes, 0 repeats
@Linux_in_a_Bit That's only happened once ... but then it was in Iran it happened.Briar's various features do sounds good, so I think I'll make a page-2 with 'extra-safe' things to do.I'm trying to think mostly about small things that would be obvious to IT people, like 'don't use your old Reddit account to discuss protests'.