News for hackers. Stuff that matters.
Re:GPG-Tui, a Terminal User Interface for GnuPG by tptacek on Saturday May 29, 2021 @11:36PM (#27330391)
Email is default plaintext, can't force encryption on groups, leaks --- in fact, gleefully publishes --- the most important dragnet surveillance metadata (even when ostensibly encrypted), creates long term archives of secrets, is built on long term secrets, and, to boot, is in the real world itself effectively centralized. It's hard to even imagine a secure messaging system less safe than email. Recommending encrypted email is simply malpractice.
Re:GPG-Tui, a Terminal User Interface for GnuPG by ekianjo on Sunday May 30, 2021 @12:02AM (#27330492)
Recommending signal fails to realize that it can be compromised in many ways precisely because it is centralized. A false sense of security.
Re:GPG-Tui, a Terminal User Interface for GnuPG by 0xCMP on Sunday May 30, 2021 @12:22AM (#27330568)
Email clients and server instances are just as centralized in practice. Yet email servers almost always know everything about you in contrast to Signal. And you can prove this by reading their code and by the fact that they respond to subpoenas with as little info as they do.

How would signal be compromised that email could not and which signal is not better prepared for?

Re:GPG-Tui, a Terminal User Interface for GnuPG by ekianjo on Monday May 31, 2021 @09:02AM (#27343633)
> Email clients and server instances are just as centralized in practice.

I don't follow. Not everyone uses Gmail or the big email providers.

Re:GPG-Tui, a Terminal User Interface for GnuPG by kasey_junk on Monday May 31, 2021 @10:05AM (#27344208)
If anyone on the communication thread uses GMail or the other big providers then the entire conversation is subject to the weaknesses of the protocol.

Right now that sits at about a 1 in 5 chance for Gmail alone.