#TechLiterate

Kevin Karhan :verified:kkarhan@infosec.space
2025-06-05

@mrmasterkeyboard #GlareScreen|s aside (which isn't your fault but #hp's) I'd say totally fine!

  • If not yourself, someone else will happily find a use-case for a cheap yet useable #laptop to get something done.

#Ubuntu is a good choice as #Desktop #Linux #distro when you want to hand this to someone who may not be as "#TechLiterate" but then again the "full" install comes with #LibreOffice, #Thunderbird and #Firefox so all the #Normies' needs are fulfilled.

  • If I only had like €/$ <100 and needed to get a laptop that works and didn't knew how to get something else (fixed) I'd propably buy it for that.

#Repair & #Reuse is always better than #Upcycle and espechally #Recycle, and getting a decent #OS on that machine and the screen fixed really made it useful...

Kevin Karhan :verified:kkarhan@infosec.space
2025-03-19

@ckrypto if@signalapp@mastodon.world wasn't complying with #CloudAct, @Mer__edith would be in jail.

Not to mention even if Signal keeps their "#OpenSource" code updated - which is doubtful, NOONE can actually #verify that it's the code you actually use - regardless if #backend / #Server or #client / #App!

  • #Signal is as secure as #ANØM, otherwise it would've been shutdown ages ago.

Also if Signal was designed for #security, it would've been #decentralized as #XMPP+#OMEMO and not demand #PII like #PhoneNumbers which oftentimes cannot be obtained anonymously in many juristictions at all!

By comparison, @delta doesn't require any PII, only an #eMail account, and @monocles isn't a #VCmoneyBurningParty but sustainable due to #subscription and they don't even require any personal details for #payment: #CashByMail and #Monero are accepted.

Again: It's Signal alone who have to evidence they are trustworthy, and all I get are "#TrustMeBro!" replies, which means they are not to be trusted.

  • Not to mention, it's just not sustainable to run a #service without #revenue, even if it's run entirely by unpaid volunteers and gets all it's #hosting and #costs donated, someone has to pay for expenses due to #abuse of a service (which is an inevitability come mass adoption)...

Whereas with #XMPP I can completely setup my own server and client, even build my own if I don't trust anyone else and pay someone to audit the code.

Whereas with XMPP & PGP/MIME #eMail I can layer @torproject / #Tor over it, make it an #OnionService and keep that thing under my bed with a literal killswitch...

Kevin Karhan :verified:kkarhan@infosec.space
2025-01-22

@max
To quote you directly:

"[...] easy to use solutions that are at the same time private and secure. [...]"

It is easier, faster, cheaper and overall simpler to get someone setup with #XMPP + #OMEMO espechally if they don't have a #PhoneNumber and/or #ID to acquire a #SIM.

And if you go and say, "Just buy a [insert country here] [e]SIM!" and expect #TechIlliterates without a #CreditCard, #PayPal or other means of #OnlinePayment to fiddle around with some #eSIM if not having to get some #eSIMcard because they can only afford to maintain one SIM and can't spend triple-digits on a new devices then you completely missed the point!

It's not that I expect anyone to get #TechLiterate within minutes, but similar to setting up a cordless DECT phone it's something one has to do once in 5 years and just have them put the password in a safe spot to retain...

Point is that #Signal #WontFix their setup and that was evidently clear even before @Mer__edith succeeded #MoxieMarlinspike: Their entire operation has a distinct #CryptoAG stench as it's an #unsustainable #VCmoneyBurning party!

A counterexample on how this could've been done are #Tor, #eMail and other truly #OpenSource as in #MultiVendor & #MultiProvider standards.

Whereas it's trivial to get people setup on one of many XMPP servers I've personally tested!

AFAIK Signal doesn't even have an #OnionService / .onion for their Website, much less any #API enpoints to use it with!

You're free to also provide evidence and supporting data to your arguments, rather then neighsaying against proven to be more secure and reliable [by virtue of decentralization] options like XMPP+OMEMO and/or #PGP/MIME.

The proper fix is to actually assess the situation and acknowledge the risks and limitations as well as the very nature of communications, which means upgrading later is exponentially more painful, thus getting people properly setup once is way easier.

  • Just because WE [ or rather @rysiek in this case ] rather privilegued enough to not be hatecrimed in their current location doesn't mean this is the case for everyone. And having places like Signal rely on a "#CDN" is just another red flag to me because questions like this one just don't arise with monocles.chat as people can just exercise proper #SelfCustody and just use Tor!

Speaking of #monocles: That business is at least #sustainable because it's funded by users (€2 p.m.) which they can pay anonymously

Kevin Karhan :verified:kkarhan@infosec.space
2024-10-08

@douglevin see, this exact scenario is why I act as "#BenevolentDictator" and literally lockdown stuff so hard #TechIlliterates cant fuck up!

  • Unless you put that option on the table as a.fellot #TechLiterate, you won't be able to survive this game.

I wasted 15+ years of my life trying to make #Windows somewhat secure to come to terms with the fact that ut's an #unfixable #Givware that is #UnsafeAtAnyConfiguration / #InsecureAtAnyConfiguration.

  • Believe me when I'd tell you that "#Users" like her don't give a shit about what Hardware/OS they get: Just set her up once with a good config (i.e. #UbuntuLTS if you're lazy like me), backup all the important stuff, setup regular backups, remove #sudo privilegues and then you'd only need to check in once a year at most if not have a system that just runs for the next 2-5 years without intervention.

On the flipside I've seen cases where #Scam|my Sales Reps were able to upsell some 5-digit 21,5" gaming monster to a photographer that uses ACDSee to do minimalist editing of their JPEGs.

At least I won't deal with #Windows11 or any of that shite because noone is gonna pay me enough to loose my sanity over such a garbage software!

And yes, WE, THE "TECH LITERATES" ARE TO BLAME FOR THIS because we didn't demand #Security and #Simplicity before #Convenience!!!

Kevin Karhan :verified:kkarhan@infosec.space
2024-09-14

@libreleah the only advantage of fancy #GUI's is that they allow #tech to be mire #accessible espechally for those that re "#TechIlliterates" and don't know basics around the terminal.

  • That's not to say either is right or wrong, but the #PC took off when it became accessible to the average person and not just the rich #TechLiterate electronics enthusiast or academic with high amounts of disposable income who are able and willing to solder, code and compile themselves...

  • I consider mainstream distros like #UbuntuLTS a good "compromise" as they offer an easy to use GUI which requires few mins to get started and don't prevent one from getting under the hood in a terminal.

  • OFC I want to build more #TUI's in like @OS1337 because I want to make something as brutally utilitarian as a #Balisong that can run on any MDA shitscreen or 80x25 serial terminal @ 9600/8/N/1 if need be... Even if it's just to partition stuff with cfdisk and curl | dd an OS image onto a headless system or SSH into some other system...

Kevin Karhan :verified:kkarhan@infosec.space
2024-08-29

@GrapheneOS *pressing X for doubt re: #Signal and #SimpleX to some degree.

  • They may just have said files encrypted on their servers but can't distinguish or decryot them * if* actual self-custody of keys is the case.

Personally I'd always recommend people to never ever trust any #SingleVendor and/or #SingleProvider solution even if that means they've to actually get #TechLiterate or at least do some more steps...

Kevin Karhan :verified:kkarhan@infosec.space
2024-08-12

@protonprivacy @puppygirlhornypost @vfrmedia

pressing X for doubt Good #OpSec dictates to never ever rely on any provder to cover one's ass...

I just think that you overstate your #privacy claims like all those #VPN companies do to bamboozle #TechIlliterates and I find that insulting to me personally, because I'd rather have honest providers like cock.li and @monocles that will not lie into the face of customers.

But that's #NotLegalAdvice...

I just think that being honest like @tomscott is way better long-term and more beneficial to one's personal #reputation, but that's just me as a #consumer and #TechLiterate.

  • I'm shure as a #PublicCompany (not traded publicly on exchanges !!!) you do have an obligation to maximize profit and share value for your #shareholders - #Switzerland isn't that different in that regard compared to #Germany - so OFC that may not roll with your board of directors.

It's just that previous blunders left a sour taste as like a #postal service or #telco what people communicate and with whom is none of your business unless you're forced to do so for "legitimate reasons" like #ITsec or to comply with duely submitted court orders...

  • Otherwise we'll soon have #regulators and #ConsumerProtection forcing hard advertisement regulation on the entire industry with big ass disclaimers being tagged on because someone made too outrageous claims re: privacy and security...
Kevin Karhan :verified:kkarhan@infosec.space
2024-08-02
Kevin Karhan :verified:kkarhan@infosec.space
2024-07-24

@ariadne @dalias as like with everyone I know and consider "#TechLiterate" in that regard.

Kevin Karhan :verified:kkarhan@mstdn.social
2024-01-03

@cabel Eeyupp...

I hate #Bots doing #TechSupport even before #MansplainingAsAService in the form of #ChatGPT was even envisioned.

Because when I have a problem, I just want to cut the bullshit and get some #TechLiterate on the phone which does care and doesn't belittle me by saying "Have you tried to turn it off and back on again?"...

Kevin Karhan :verified:kkarhan@mstdn.social
2023-12-08

@ljrk @lexd0g And yes, I know that #passwords are bad but besides #SSH & #PGP #Pubkeys there is no good way to authenticate that isn't like a #TOTP / #HOTP - like #2FA or some confirmation message...

#Passkey don't make people more #TechLiterate and actually learn how to use a #PasswordManager|s or exercise #SelfCustody of Keys...

Nor do they save the problem that platforms / logins don't do basic behaviour-based protection against just spamming credentials or irregular patterns.

Kevin Karhan :verified:kkarhan@mstdn.social
2023-12-08

@ljrk @lexd0g It's worse because #Passkey brick a lot of workflows and systems as an addon-layer instead of fixing the core problem.
And the core problem is that #ITsec, #OpSec, #ComSec and #InfoSec are just "Afterthoughts" at best for all but the most #TechLiterate.

Using i.e. #PGP encryption and login on everything [and not as a "password replacement"] would be a way better fix.
Just like @torproject does a self-signing namespace on #OnionServices.

Again, not perfect but better than #SSL!

Kevin Karhan :verified:kkarhan@mstdn.social
2023-10-13

@ilumium @edri doesn't mean @EU_Commission isn't breaking the laws nor that it's anti-democratic and evil.
#NotLegalAdvice OFC.

Also can we please stop that #cyberfacist #figleaf|ing?

@MOGiS already wiped the floor with #Zensursula almost two decades ago, and she still owes everyone who can change #DNS settings an apology for claiming everyone more #TechLiterate than her is a "hardened pedo-criminal"...

I want my #HumanRights and #CivilRights back - all of them since 1949 - WITH INTEREST!

Kevin Karhan :verified:kkarhan@mstdn.social
2023-10-08

@case2tv I chose #Enpass since it literally runs on everything* - espechally #Android and #Linux and doesn'r equire some subscription or charges people for the "privilegue" of self-hosting, like #BitWarden.
It's also #TechIlliterate-friendly.

*Okay it doesn't run on #BSDs and #Unix except macOS & iOS, but then again:
People who daily drive #OpenBSD, #FreeBSD or #NetBSD are usually #TechLiterate enough to basically setup their own #password storage system from scratch & sync and backup stuff.

Kevin Karhan :verified:kkarhan@mstdn.social
2023-10-02

@kobayashi90 I mean, we gotta have to inform the #TechIlliterates that may stumble upon this thread and they too need to be informed on ~why~ claims made by @protonmail, @signalapp and other #centralized #SingleVendor & #SingleProvider solutions are inherently wrong!

We can't complain about people being #'TechIlliterate without doing our part in reducing #TechIlliteracy and making people more #TechLiterate...

Kevin Karhan :verified:kkarhan@mstdn.social
2023-07-23

@damngoodtech In the end it's a consumer's choice.

People need to be #TechLiterate enough to value #repairability (and #upgradeability) over making tue thinnest devices possible.

Now granted, both @frameworkcomputer amd @Fairphone did manage to design #thinn yet repairable devices, proving that all the #AntiRepair-Arguments are corporate propaganda lies!

Personally I'd accept even #thicc'er devices if that means they'd use more #COTS and less #custom parts...

Kevin Karhan :verified:kkarhan@mstdn.social
2023-06-26

@evacide #Stalkerware & #Govware producers are ALWAYS legitimate targets.

They are unethical per concept and have no legitimate reasons to exist!

Also I do assume they are shitty because they all assume everyone else is "less #TechLiterate" than them...

Kevin Karhan :verified:kkarhan@mstdn.social
2023-06-12

@fosserytech Worse in this case is that it's not politicans but #DGSI field agents...

You know, #french #interior #intelligence.
en.wikipedia.org/wiki/General_

If these guys get spooked by people being more #TechLiterate then themselves, maybe said agency is more risk than benefit for the #NatSec of #France...

Kevin Karhan :verified:kkarhan@mstdn.social
2023-06-08

And yes the core problem is that people are not #TechLiterate and that they get groomed into stupid consoomers and only educated far enough to maximize the profit as exploitable wageworkers!

youtu.be/u-sNSjS8cq0?t=5207

Kevin Karhan :verified:kkarhan@mstdn.social
2023-05-13

@xyhhx @marcan also yes, it's up to the #TechLiterate to protect the #TechIlliterates even if that means one needs to put them into well-padded sandboxes where they can't hurt themseles or others...
mstdn.social/@kkarhan/11006827

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst