this post was submitted on 21 Aug 2024
151 points (94.2% liked)

Technology

59148 readers
2260 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
151
US Feds Are Tapping a Half-Billion Encrypted Messaging Goldmine (www.404media.co)
submitted 2 months ago by [email protected] to c/[email protected]
44 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 2 months ago (1 children)

How is it a lot harder to track if the FBI can just subpoena the sysadmin for server/room logs?

With respect, this viewpoint is not defensible from an operational security perspective.

It’s like saying they should use GMail because they have hundreds of millions of users. When the problem isn’t being a needle in haystack, but rather the fact that Google will gladly look through your private data and happily hand it over to the authorities.

[–] [email protected] 0 points 2 months ago* (last edited 2 months ago) (1 children)

How is it a lot harder to track if the FBI can just subpoena the sysadmin for server/room logs?

  1. What would stop them from subpoenaing all information from your personal server?
  2. There's no personal information tied to your account. The server does not have your IP, your email, your CC, etc.

With respect, this viewpoint is not defensible from an operational security perspective.

"With respect", ya don't know what you're talking about.

It’s like saying they should use GMail because they have hundreds of millions of users.

Except it's not like that at all because Gmail is going to collect all the information about you they possibly can and Matrix is going to do the opposite.

[–] [email protected] 1 points 2 months ago (1 children)

What would stop them from subpoenaing all information from your personal server?

If you’re a drug dealer and the FBI sends you a subpoena—you could simply….not respond.

There’s no personal information tied to your account.

There is actually a bunch of metadata tied to your account and your room. That’s partly how they caught that kid with the Pentagon leaks.

And again, there may be other services between the clients and the matrix server that collect personal data (e.g. reverse proxies, load balancers).

—

If you are someone who ostensibly cares about privacy and security (like a drug dealer) why would you rely on the benevolence and security hygiene of a stranger you can’t audit? Instead of using a known good actor, like Signal or SimpleX, or no actor, like Briar.

[–] [email protected] 0 points 2 months ago

If you’re a drug dealer and the FBI sends you a subpoena—you could simply….not respond.

I mean sure, but then you'd have bigger problems.

There is actually a bunch of metadata tied to your account and your room.

I understand Metadata is a big problem with Matrix (even for me, personally). Metadata is not personal information if it remains detached from your identity.

If you are someone who ostensibly cares about privacy and security (like a drug dealer)

LOL

why would you rely on the benevolence and security hygiene of a stranger you can’t audit?

I've already explained why.

Instead of using a known good actor, like Signal or SimpleX, or no actor, like Briar.

Like I said, there are pros and cons of each. I'm not telling you you should use anything specific. You just have to use whatever works for your situation.