IzzyOnDroid@mastodon.technology - For those who missed it, and those who want to repeat it: the recording of our first training session / talk on "F-Droid App Review" is online now

https://libre.video/videos/watch/5d32d19d-e012-4b6c-a962-14e670f1648b​

I've created a new channel for it, as hopefully more are to come (and hopefully also in better quality than this "quick cut", I'm out of training in video editing):

https://libre.video/video-channels/foss/videos​

#fdroid #foss #contribution #getInvolved #android #apps​

https://chaos.social/@Bubu/105465563751498804

Bubu@chaos.social - I've also released a new beta version of #FDroidClassic just now (see https://git.bubu1.eu/Bubu/fdroidclassic/#beta-versionsfaster-updates)

v1.1-beta4
* Fix a bunch of crashes that have been reported since the last beta
* Some donation option tweaks
* Translation and dependency updates

Hopefully v1.1 will be ready for a release soon.

media.ccc.de - CIA vs. Wikileaks – https://media.ccc.de/v/rc3-11512-cia_vs_wikileaks

CIA vs. Wikileaks Intimiditation surveillance and other tactics observed and experienced

In this talk, I aim to report and show a collection of observations, physical, visual and other evidence of the last years incidents that strongly indicate a context of the US Central Intelligence Agency and/or potentially other entities of the US Government actions against Wikileaks and surrounding persons and organisations.

While the area of technical surveillance, SIGINT/COMINT and related Organizations and Methods have been more or less well understood in the hacker scene, the tactics and methods experienced and discussed in this talk are of a different type: For the moment, I would call it "initimidation surveillance" as it lacks the aspect of "covert" type of actions.

On the last Chaos Communication Congress, I have analysed the technical aspects of the surveillance in and surrounding the ecuadorian embassy where Julian Assange stayed; this talk shows what happened to other people - friends of Assange, supporters of Wikileaks etc - not only in England, but also in other countries / other parts of the world.

The idea is to not only show the scope of activities but also to contribute to a better understanding of these tactics, that might be applied also in completely different political environments where governments act in extralegal ways against activities they dislike, although they that are not a crime or easily criminalized.

Speak Now Or Forever Hold Your Peace with Whitney Webb

Tin Foil Hat Podcast With Sam Tripoli: #402

Video https://brokensimulation.com/tin-foil-hat-with-sam-tripoli-402-speak-now-or-forever-hold-your-peace-with-whitney-webb/

Audio https://www.spreaker.com/user/11759118/tfh-webb-audio

Download mp3: https://chtbl.com/track/52E72/api.spreaker.com/download/episode/42260198/tfh_webb_audio.mp3


#whiney #webb #silicon #valley #why #technofascism #israel #1984

A megacorp is not your dream job
- Drew DeVault

https://drewdevault.com/2021/01/01/Megacorps-are-not-your-dream-job.html

Mapped: The Top Surveillance Cities Worldwide

https://www.visualcapitalist.com/mapped-the-top-surveillance-cities-worldwide

#cameras #cctv #cities #streets

Web Security and Web Hacking for Beginners

Welcome to the course on “Web Security and Web Hacking for Beginners”. This course is designed for beginners who wants to start their journey in web security and web hacking.

👉🏼 Part 1 (Introduction - 4 videos)
👉🏼 Part 2 (Deeper understanding of Web Security - 2 videos)
👉🏼 Part 3 (Various attacks on Web Security - 9 videos)
👉🏼 Part 4 (Conclusion - 1 video)

💡Each video comes with additional (English) subtitles

This course is basically designed by taking into account that you don’t have idea about web security and you want to learn basic concept and then directly jump into action. Concepts like URL, HTTP, HTTPs etc. are explained to make student comfortable with the concept that we are going to use and then jump directly to action content like SQL injection, XSS, DDoS, etc. We want to make sure that you learn basics at the same time you don’t miss action while learning basics.

#video #tutorial #web #security #hacking #beginners #part1#part2 #part3 #part4
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Julian Assange: Judge blocks US extradition order

The WikiLeaks founder can stay in the UK, a court ruled on Monday.

WikiLeaks founder Julian Assange will not be extradited to the US from the UK, a judge in London ruled Monday. District Judge Vanessa Baraitser blocked the extradition request on the basis of Assange's mental health.

Assange is wanted in the US on espionage charges and faces an 18-count indictment accusing him of conspiring to hack military databases to publish classified information about the wars in Iraq and Afghanistan. If convicted, Assange could be handed a 175-year jail sentence, although the US government has said he would likely face a sentence of between four and six years.

In her ruling, Baraitser said that based on evidence of self-harm and suicidal thoughts, Assange would be likely to try and kill himself if subjected to the US prison system. She was not satisfied that the procedures described by the US would prevent Assange from suicide, she added.

Authorities in the US will appeal the decision.

https://www.cnet.com/news/julian-assange-judge-blocks-us-extradition-order/

https://www.theguardian.com/media/2021/jan/04/julian-assange-cannot-be-extradited-to-us-british-judge-rules

#assange #uk #usa #extradition
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Google's mercenaries announce plans to unionize

https://www.theverge.com/2021/1/4/22212347/google-employees-contractors-announce-union-cwa-alphabet

https://www.nytimes.com/2021/01/04/technology/google-employees-union.html

Here's a hint for them: https://iww.org

#Google #union #unionize

Singapore Police Forces start using your Covid-19 contact tracing data for investigations

http://telegra.ph/Singapore-COVID-19-contact-tracing-data-accessible-to-police-01-05

https://www.teddit.net/r/privacy/comments/kqjpw5/police_forces_start_using_your_covid19_contact/

https://www.channelnewsasia.com/news/singapore/singapore-police-force-can-obtain-tracetogether-data-covid-19-13889914

https://www.teddit.net/r/singapore/comments/kq3kv8/singapore_police_force_can_obtain_tracetogether/

@r_privacy
#coronavirus #covid #tracking #stalking #police #cops #singapore #gov #why

WhatsApp gives users an ultimatum: Share data with FB or stop using the app
Article, Comments

Encrypted Messaging App Signal Sees Surge in Popularity Following WhatsApp Privacy Policy Update

Encrypted messaging app Signal faced big delays in verifying the phone numbers of new accounts on Thursday because of a sudden surge in people trying to join the platform.

In messages posted from its official Twitter account, the non-profit Signal Foundation said verification codes were delayed across several cellular networks, and that it was working through the backlog as quickly as it could.

While the issue is now said to have been resolved, the surge in Signal signups followed recent privacy policy changes highlighted by rival messaging platform WhatsApp.

On Wednesday, WhatsApp began rolling out its latest terms and privacy policy, which allows the popular messaging app to share a significant amount of user data with Facebook. The changes, which are set to take effect on February 8, 2021, are mandatory and users will not be able to continue using WhatsApp unless they accept the terms.

Users who agree to the terms can expect their WhatsApp account registration and phone number, transaction data, service-related information, interaction information, mobile device information, IP address, and other data to be shared with Facebook.

https://www.macrumors.com/2021/01/08/messaging-app-signal-sees-surge-signups/

#signal #whatsapp #facebook #messaging #privacy

I hear Facebook has an entire department devoted to figuring out why Telegram is so popular. Imagine dozens of employees working on just that full-time.

I am happy to save Facebook tens of millions of dollars and give away our secret for free: respect your users.

Millions of people are outraged by the latest change in WhatsApp Terms, which now say users must feed all their private data to Facebook’s ad engine. It’s no surprise that the flight of users from WhatsApp to Telegram, already ongoing for a few years, has accelerated.

At about 500 million users and growing, Telegram has become a major problem for the Facebook corporation. Unable to compete with Telegram in quality and privacy, Facebook’s WhatsApp seems to have switched to covert marketing: Wikipedia editors have recently exposed multiple paid bots adding biased information into the WhatsApp Wikipedia article [1].

We have also detected bots which spread inaccurate information about Telegram on social media. Here are the 3 myths they are pushing:

Myth 1. “Telegram’s code is not open-source”. In reality, all Telegram client apps have been open source since 2013 [2]. Our encryption and API are fully documented and have been reviewed by security experts thousands of times. Moreover, Telegram is the only messaging app in the world that has verifiable builds both for iOS and Android [3]. As for WhatsApp, they intentionally obfuscate their code, making it impossible to verify their encryption and privacy.

Myth 2. “Telegram is Russian”. In fact, Telegram has no servers or offices in Russia and was blocked there from 2018 to 2020 [4]. Telegram is still blocked in some authoritarian countries such as Iran, while WhatsApp and other “supposedly secure” apps have never had any issue in these places.

Myth 3. “Telegram is not encrypted”. Every chat on Telegram has been encrypted since launch. We have Secret Chats that are end-to-end and Cloud Chats that also offer real-time secure and distributed cloud storage [5]. WhatsApp, on the other hand, had zero encryption for a few years, and then adopted an encryption protocol funded by the US Government [6]. Even if we assume that the WhatsApp encryption is solid, it’s invalidated via multiple backdoors and reliance on backups [7].

In 2019 alone, Facebook spent almost 10 billion dollars on marketing [8] (I guess this includes paid bots on Wikipedia and other sites).

Unlike Facebook, Telegram doesn't spend any money, let alone billions of dollars, on marketing. We believe that people are smart enough to choose what is best for them. And, judging by the half a billion people using Telegram, this belief is justified.

[1] – WhatsApp Gives Users Ultimatum – Share Data with Facebook or Lose Access
[2] – In December 2020, the Wikipedia article about WhatsApp had the label “This article may have been created or edited in return for undisclosed payments, a violation of Wikipedia's terms of use”. Related investigation is discussed here.
[3] – Telegram Source Code
[4] – Reproducible Builds for Telegram Apps
[4] – On Digital Resistance in Russia
[5] – On Telegram Encryption
[6] – U.S. Government Funded The WhatsApp Encryption
[7] – Why WhatsApp Will Never Be Secure
[8] – Facebook Marketing Spending from 2010 to 2019

After close review of recent Tweets from the

@realDonaldTrump

account and the context around them we have permanently suspended the account due to the risk of further incitement of violence.

https://twitter.com/TwitterSafety/status/1347684877634838528

#ToddlerTrump #twitter
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

WhatsApp Has Shared Your Data With Facebook for Years, Actually

A pop-up notification has alerted the messaging app's users to a practice that's been in place since 2016.

Some media outlets and confused WhatsApp users understandably assumed that this meant WhatsApp had finally crossed a line, requiring data-sharing with no alternative. But in fact the company says that the privacy policy deletion simply reflects how WhatsApp has shared data with Facebook since 2016 for the vast majority of its now 2 billion-plus users.

https://www.wired.com/story/whatsapp-facebook-data-share-notification/

#whatsapp #DeleteWhatsapp #facebook #DeleteFacebook #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

I’ve been taking part in the discussion in the comments and answering questions. Here are some of the responses:

On Apple-Google censorship https://t.me/durovschat/518801

On making server-side code open https://t.me/durovschat/515221

On a privacy-conscious ad platform https://t.me/durovschat/527441

On US-based encrypted apps https://t.me/durovschat/519187

On encryption vs. usability when using Secret Chats vs Cloud Chats https://t.me/durovschat/527081

On maximising security of communication https://t.me/durovschat/527134

Whatsapp