mastodon.ie is one of the many independent Mastodon servers you can use to participate in the fediverse.
Irish Mastodon - run from Ireland, we welcome all who respect the community rules and members.

Administered by:

Server stats:

1.5K
active users

#anonymity

4 posts4 participants0 posts today

Article on TOR (The Onion Router).

"Today, privacy technologies like Tor underpin our digital society. From VPNs and encrypted messengers like WhatsApp to the basic security features in our digital systems, they’re essential tools for defending against cybercrime."

thereader.mitpress.mit.edu/the

Open Access Book [ direct.mit.edu/books/oa-monogr ]

The MIT Press Reader · The Secret History of Tor: How a Military Project Became a Lifeline for PrivacyA story of secrecy, resistance, and the fight for digital freedom.
Replied in thread

@adisonverlice even if an #MVNO isn't demanding any #KYC whatsoever (i.e. #prepaid are offered OTC in most juristictions) it's NOT "#Anonymous" but merely #pseudonymous as it's trivial for governments to utilize existing and mandtory "#LawfulInterception" appliances to create that #PII chain.

#PhoneNumber <=> #ICCID (#SIMcard) <=> #IMSI (SIM profile) <=> #IMEI (Phone/...).

So if #Anonymity is important, NONE of these details have to be linked somehow even circumstantial.

  • Bought/paid for the phone/SIM/ a single top-up with ec/CC/PayPal/SEPA/… = busted due to circumstantial connection.

  • Use the SIM in any device? Consider them circumstantially connected forever: #ICCID <=> #IMEI.

  • Same applies to #eSIM|s: #EID <=> #ICCID <=> #IMEI.

Add to the fact that most places have #CCTV, and assume that they'll keep recordings for the maximum permissible duration if not longer and oftentimes even use questionable cloud services and you get the picture.

  • I.e. in Germany the maximum permissible storage duration is 72 hours (if nothing hapoens that warrants a longer storage i.e. burglary/theft/robbery/arson/...) so anonymous top-ups would necessitate paying cash at a place one's not been known at (i.e. some kiosk) and waiting at least >72 hours (and checking on the purchase location) before redeeming the top-up code (i.e. dialing *104*1234567890123456# )...

So any #privacy-based service should never ever & under no circumstances demand a Phone Number!

  • Instead any privacy-focussed service should use #OnionServices, host their own #OnionService or at least #DontBlockTor and allow users to use it via @torproject / #Tor to use and signup. (But don't forget circumstantial connections there either!)

  • Also the less details they want or store and the least traffic they generate the harder it is to correlate traffic & users.

TORSERV: Host a Static Website on the Dark Web in Under 1 Minute
"Hosting a Tor hidden service — also known as an onion site — typically requires in-depth technical skills and manual configuration. With TorServ, you can host a static website anonymously in seconds, without touching any config files."
This software deserves some attention. It could be useful for at-risk people who need to publish while protecting identity.

#TorServ #TOR #Onions #OnionNetwork #Privacy #Anonymity

@selfhosting@a.gup.pe
@infosec@a.gup.pe
@linux@a.gup.pe
@networks@a.gup.pe
@crypto@a.gup.pe
@darknet@a.gup.pe
@privacy@a.gup.pe
@infostorm@a.gup.pe
NEWSCARD: Decentralized, Encrypted Paste Bin via Usenet Newsgroups

NEWSCARD Publish and fetch permanent named records via Network News

Newscard creates a decentralized, encrypted, named record paste bin.

[git repo] https://codeberg.org/OCTADE/newscard (use most recent version only)

With a single command, name the card, snarf the file and encrypt it.

With another command, push the encrypted file to the public network.

With another short command, snarf a file from the network.

Only users knowing the name [key] of the record will be able to decrypt it.

If a strong passphrase is used to name the file, it will be very secure.

This is useful for quickly snarfing, encrypting, and publishing a text file:

$~: card enc [passphrase] [file]
$~: card put [passphrase]

It is useful for retrieving a text file with just a key:

$~: card get [passphrase]
$~: card show [passphrase]

If and when you want the general public to access the record just share the keyword.

Newscard uses nine (9) (NINE) layers of encryption with OpenSSL chacha20 cipher.

Newscard generates 9 each of: cipher keys, salts, key iteration parameters.

It would be nice if something like this were added to the ActivityPub protocol, such that keyword[@]host.url would do the same thing. Then secret text records could be stored securely for later retrieval or revelation.

#NewsCard #Pastebin #Usenet #NNTP #NetworkNews #Encryption #Cryptography #Messaging #Anonymity #Protocols #OpenSource #FreeSoftware #BlackHackJack #Censorship #Retro #InfoSec #Ciphers #Codes #FOSS

@infostorm@a.gup.pe @crypto@a.gup.pe @infosec@a.gup.pe @selfhosting@a.gup.pe

Looking at the immediate effects of the #UK new #OnlineSafetyAct I can’t help wonder who, exactly, wanted this. It’s an #infosec nightmare come to life, with massive damage being done to individual #safety, #privacy and #security.

No children will be safer by this, none. No citizen. Only those currently in power, when #anonymity is destroyed.

If the #EU persists in pushing for like legislation, the #Internet will truly have been destroyed, with all the economic value it holds.

This is no surprise, so the remaining question is ”Who benefits?”, as always.

"The prosecution’s flailing attempts to navigate around the Blanche memo exemplify the incoherence of the Trump administration’s approach to cryptocurrency enforcement: sweeping regulatory rollbacks that primarily benefit wealthy crypto operators, while simultaneously pushing ahead with aggressive prosecutions of developers like Storm to avoid the appearance of being soft on North Korea or cybercrime more broadly. The result is a prosecution that must somehow prove that Storm failed to implement specific compliance controls, without being able to point to any regulations outlining these controls that he supposedly failed to follow.

With their legal theory in shambles, prosecutors have resorted to tenuous guilt-by-association arguments and mischaracterized evidence. They’ve tried to hold Storm responsible for scams that may not have even touched Tornado Cash, argued that he should be culpable for not helping scam victims in ways that would not have been technically possible, and built a case for intent around chat messages that turned out to be forwarded news inquiries rather than evidence of criminal conspiracy. What remains is less a coherent prosecution than a cautionary tale about the dangers of letting political imperatives drive criminal cases."

citationneeded.news/tornado-ca

Citation Needed · The Tornado Cash case: When politics sabotage a prosecutionThe Trump administration’s regulatory whiplash has left prosecutors scrambling with misattributed chat messages and questionable victim testimony

Hello instance!

Social media never looked interesting before but I'm having more and more the need to interact with people outside my physical bubble, both for diversity and for interest sharing, and mastodon looks great for that. At least I already found interesting people to follow.

I'm very keen on #anonymity, #privacy, #freedom and #empathy they are the cornerstones of a fair (even if not equal) society, IMO.

Also, #opensource #nerdstuff #rustlang #deregulation