#SingleProvider

Kevin Karhan :verified:kkarhan@infosec.space
2025-12-05

@mudaste how can one choose a #centralozed, #SingleVendor & #SingleProvider solution (@simplex) over @briar and espechally @monocles / #monoclesChat & @delta / #deltaChat?

Never heard of @cwtch before!

Kevin Karhan :verified:kkarhan@infosec.space
2025-12-05

@PinoBatch +9001%

#IssueTracker and #TicketingSystem|s are way better means to report bugs.

  • #Docukentation is key and users should be given accessible, step-by-step guides and easy troubleshooting help where needed.
Kevin Karhan :verified:kkarhan@infosec.space
2025-11-04

@jenzi @lexinova @davidfetter Doesn't even need that.

#XMPP+#OMEMO (Chats) & #P2P-#WebRTC (Video- & VoiceCalling) are evdently better than a centralized, #SingleVendor & #SingleProvider system

Kevin Karhan :verified:kkarhan@infosec.space
2025-11-03

@laprice pressing X for doubt cuz @signalapp does have #ToS and obviously both the ability and willingness if not being legally mandated to close down accounts - regardless if a "duely issued warrant" or #CloudAct.

Signal being abused is a statistical inevitability and it's one thing to claim to not know the contents vs. knowingly ignoring abuse complaints.

  • Cuz #OCILLA only covers their ass legally until the point they get to know certain abuses. After that (+ a certain grace period for duely investigating validity) that doesn't apply anymore.

#NotLegalAdvice but given Signal is located in the #USA and thus falling under #US juristiction, I'd only consider the non-reaction as either 'knowingly supporting' or 'being ordered by a judge to not interfere in ongoing investigations'

But remember: #WhatYouAllowIsWhatWillContinue and Signals #centralized, #proprietary, #SingleVendor & #SingleProvider approach vs. #decentralized (#XMPP+#OMEMO) or #SelfHosting (#OnionShare) will be their downfall - besides hosting at the most expensive provider (#aws) in spitting distance to #CIA & #NSA HQs (#aws_us_east_1) that isn't an outright scam-hoster!

Kevin Karhan :verified:kkarhan@infosec.space
2025-10-20

@cartocalypse @sigmasternchen @pallenberg Gibt zuviele Indizien:

#PII wie #Rufnummer wird abgefragt; Geolokation bzw. Service-Beschränkungen aufgrund dessen erfolgen

Aus den #USA = #CloudAct greift

Struktur und Setup ähnelt #ANØM und "Ausfälle" erinnern an #EncroChat .

Wenn @signalapp so sicher wäre wie beworben dann wären #Moxie und @Mer__edith seit Jahren in #Beugehaft wegen #Missbrauch durch Nutzer*innen.

  • Ich kann die ganze Woche weiter machen, aber die Tatsache dass #Signal durch ein AWS-#Datacenter down geht zeugt von schlampiger Infrastruktur und Mehr Geld als Verstand!

Jedenfalls ist es kein deut besser als #CryptoAG - technisch sogar schlechter denn letztere versuchte wenigstens nicht dauerhaft Kritiker*innen zu gaslighten sondern wurde in der #Schweiz hinter ne #Tarnfirma gepackt.

Es stinkt jedenfalls wie #OperationIronside aka. #OperationTrøjanShield!

Kevin Karhan :verified:kkarhan@infosec.space
2025-10-05

@mechanix @delta @randy_ @gaufff precisely!

Personally, I feel confirmed to not use #Centralized & #proprietary #SingleVendor & #SingleProvider options like @signalapp / #Signal which by virtue of collecting #PII in the form of #PhoneNumbers are at best #UsefulIdiots if nit a blatant #HoneyPot...

Anything else doesn't work!

  • The only way you can guarantee your #HumanRights is by actively enforcing and using them in the most aggressibe way possible that doesn't infringe upon others' rights...
Kevin Karhan :verified:kkarhan@infosec.space
2025-09-24
Kevin Karhan :verified:kkarhan@infosec.space
2025-09-21

@KirbySSM Yeah, but said platfirms being #proprietary, #centralized & #SingleVendor / #SingleProvider and unwilling to mobilize their user base are part of the problem, not the solution.

Kevin Karhan :verified:kkarhan@infosec.space
2025-09-04

@grimmy @MattKC @gajim @pidgin Shure, I just don't use any of these #proprietary, #SingleVendor & #SingleProvider services.

  • OFC it's his time and skills...
Kevin Karhan :verified:kkarhan@infosec.space
2025-09-03

@MurrayWindripper @micahflee except #Signal being a #Centralized, #SingleVendor & #SingleProvider solution that (illegally!) demands and collects #PII (#PhoneNumber) for no legitimate reason makes them inherently bad.

I went into lenghts and have linked details re: @signalapp here:
infosec.space/@kkarhan/1148625

Kevin Karhan :verified:kkarhan@infosec.space
2025-08-27

@iznogoud @tauon It wasn't meant to be disrespectful, just me being blunt and upfront that this is the least of the problems #discord as an #enshittified #SingleVendor & #SingleProvider #SaaS has...

  • Sorry if that made you feel uncomfortable or seemed unprofessional from me.
Kevin Karhan :verified:kkarhan@infosec.space
2025-08-19

@arstechnica Obviously, #Starlink is sabotaging #FTTB & #FTTH as regulators like @BNetzA allow subsidies for that #proprietary #SingleVendor & #SingleProvider network instead of #OpenAccess #fiber-pairs based off #Ethernet

Kevin Karhan :verified:kkarhan@infosec.space
2025-08-18

@ustralien @bjoern Unabhängig davon ist die globale Verfügbarkeit essentiell.

  • Wenn internationale Händler und Plattformen (auch außerhalb der #EU) es nicht unterstützen ist es im 21. Jahrhundert relativ wertlos.

Nennt sich #Nerzwerkeffekt und da es ein #zentralisiertes, #SingleVendor & #SingleProvider - System ist hat es nunmal entsprechende *Kritik zu fixen!

Kevin Karhan :verified:kkarhan@infosec.space
2025-07-29

@adisonverlice ALL #SingleVendor, #SingleProvider #Messengers that are #proprietary by virtue of not having everything #FLOSS'd are inherently bad.

If that shit was actually secure, it would've been abused so hard that she'd be in jail for refusing to comply with #CloudAct and duely issued warrants as well as being complicit in the "abuse" of said platform.

Kevin Karhan :verified:kkarhan@infosec.space
2025-07-24

@glitzersachen @Yuki relative...

I think that @cperciva et. al. made a good product & service with #Tarsnap and their #SelfCustody-based #encryption is solid.

  • It's just that it is still a #SingleVendor / #SingleProvider solution and that #BDSG & #GDPR say "No!" when it comes to handing over data to 3rd parties outside the #EU that are subject to #CloudAct, regardless if it's considered 'unfeasible if not impossible' that they could ever decrypt it.

tarsnap.com

Kevin Karhan :verified:kkarhan@infosec.space
2025-07-16

@FandaSin Obviously that is kinda expected.

I don't expect a single developer with no money and time to maintain this, but at least see some professional option for that.

infosec.space/@kkarhan/1148626

Kevin Karhan :verified:kkarhan@infosec.space
2025-07-16

One thing that really pisses me off personally is the #regression in terms of #Messenger #Apps.

My personal distaste and dislike for #proprietary, #SingleVendor & #SingleProvider #services like #Signal ¹ ², #Telegram, #Discord ³ , #WhatsApp 5, #Slack, #MicrosoftTeams, etc. aside:

  • WHY is there no #CrossProvider #Messenger to handle that shite?

  • WHY does everyone of these shitty providers think people want to download their #bloated #WebApp that takes up triple digit Megabytes if not entire Gigabytes and will gobble up all the #RAM and #CPU each of them can??

This problem ain't new and already got solved for corporate social media ages ago! (Not to mention actually good messengers!)

So yeah, consider this a call for a @gajim / #Gajim or @pidgin / #Pidgin for garbage platforms!

  • Cuz back in the day we had way worse messengers yet people actually made #AIM, #ICQ, #MSN, #QQ, #IRC & #XMPP work just fine from one single "phat" client!

  • Can we please get that back? Cuz #WastefulComputing pisses me off!

#api0 #Enshittification

Kevin Karhan :verified:kkarhan@infosec.space
2025-07-01

@photovince anyone who doesn't trust a.#centralized, #proprietary #SingleVendor & #SingleProvider solution that demands #PII for no valid reason like @signalapp does!

Kevin Karhan :verified:kkarhan@infosec.space
2025-06-29

@artfulmodder last time I checked @signalapp still demanded #PII in.the form of a #PhoneNumber, still peddled the #MobileCoin #Shitcoin #Scam and didn't move out of the #Cyberfacist #USA despite #CloudAct being nothing new!

  • Not to mention #Signal is both able and willing to discriminate against users based off said PII. Just because they do it for "#Sanctions #Compliance" diesn't mean they ain't gonna change that nor that @Mer__edith (or anyone else at Signal) could be bribed or threatened to do so.

They are #centralized #SingleVendor & #SingleProvider and are thus a #SinglePointOfFailure per design!

IMHO "memory tagging" is the least of Signal's problems. To me they stench "#ControlledOpposition" just as hard as #ANØM and incompetence as hard as #EncroChat!

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst