[Linux-aus] Operation Anzacathon is go!

martin f krafft madduck at madduck.net
Fri May 1 15:57:00 AEST 2020


Regarding the following, written by "Ben McGinnes via linux-aus" on 2020-05-01 at 02:21 Uhr +0000:
>> Maybe consider signal (www.signal.org) as the comms platform. It's 
>> secure,
>
>That depends entirely on your threat model.  While I have no reason to 
>doubt the strenth of the cryptographic functions it contains, there 
>are potential problems with the protocol design.  Not least of which 
>being that it requires all users share their mobile number with 
>everyone else, which may not be appropriate for their individual 
>circumstances.

That, and the fact that they enforce a proprietary, centralised 
server, and while there is source code, the clients aren't built 
reproducibly, and so you can't actually tell what you're running.

Matrix is completely open-source, under foundation control, and 
federated. Just use that ;)

-- 
@martinkrafft | https://riot.im/app/#/room/#madduck:madduck.net
  
an egg has the shortest sex-life of all: if gets laid once; it gets
eaten once. it also has to come in a box with 11 others, and the
only person who will sit on its face is its mother.
  
spamtraps: madduck.bogus at madduck.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linux.org.au/pipermail/linux-aus/attachments/20200501/9195565f/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: digital_signature_gpg.asc
Type: application/pgp-signature
Size: 1187 bytes
Desc: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
URL: <http://lists.linux.org.au/pipermail/linux-aus/attachments/20200501/9195565f/attachment-0001.sig>


More information about the linux-aus mailing list