@pu@ieji.de @bkastl@mastodon.social
#Nextcloud sitzt in Deutschland, entwickelt eine mega geniale, datenschutzfreundliche #OpenSource #Cloud mit allem wünsch-dir-was, aber nein, man muss über dubiose Umwege weiter auf den #BigData #Datenkrake #CloudAct Mist aus den #USA setzen 
#FOSS #Datenschutz #TeamDatenschutz #PublicMoneyPublicCode
@signalapp no it's not.
Being a #centralized, #SingleVendor & #SingleProvider solution subject to #CloudAct makes you inherently vulnerable by your own choice and thus trivial to shutdown compared to real #E2EE with #SelfCustody of all the keys and true #decentralization as well as #SelfHosting (i.e. #PGP/MIME [see @delta / #deltaChat et. al.] and #XMPP+#OMEMO [see @monocles / #monoclesChat et. al.]!)
And don't even get me started on you collecting #PII (espechally #PhoneNumbers) for no valid reason, (thus violating #GDPR & #BDSG)...
But yeah, I'll be patient to shout "#ToldYaSo" to your annoying cult of fanboys!
@Fr333k @FritzAdalis propably...
Whatever floated #NSA's #cyberfacist boat back then (or today, cuz #PRISM never really ended. It merely got transfered over and legalized (see #CloudAct)...
@pixelcode @taylan @signalapp the #centralization, espechally without means to hide it's traffic via @torproject / #Tor makes it trivial to detect and track @signalapp / #Signal users.
And with no self-custody of keys it's trivial to #Room641A the users if the devs get "motivated" under threat of spending the rest of theor lives in jail.
@bsi
Eine originelle Methode für den #ITGrundschutz ist die Zusammenarbeit mit google im Bereich Cloud, während Europa zunehmend um Souveränität von BigTech bemüht ist. #unplugtrump
""Die BSI-Google Zusammenarbeit ist ein potenzieller Booster für digitale Abhängigkeit und Erpressbarkeit Deutschlands von den USA", schreiben die GI-Arbeitskreise für digitale Souveränität, Open Source sowie Datenschutz und IT-Sicherheit in einer am Donnerstag veröffentlichten Analyse. Google sei aufgrund der Rechtslage in den USA gar nicht dazu in der Lage, einen souveränen Dienst im hierzulande erforderlichen Sinne anzubieten. US-Präsidenten wie aktuell Donald Trump könnten "immer das Licht ausschalten". Weitere Kritikpunkte sind fehlende Transparenz, etwa im Umgang mit dem Cloud Act, und eine Wettbewerbsverzerrung mit Benachteiligung europäischer Firmen durch einen "TÜV-Stempel"."
https://www.heise.de/news/Erpressbarkeit-Informatiker-gegen-Cloud-Kooperation-zwischen-BSI-und-Google-10324992.html
CLOUD Act:
https://de.wikipedia.org/wiki/CLOUD_Act
@signalapp It's not #disinfo when one points out that you demand #PII aka. #PhoneNumbers from Users and that is literally a architectural vulnerability, alongside your #proprietary & #Centralized #Infrastructure.
Not to mention the lack of @torproject / #Tor support with an #OnionService or the willingness to fulfill #cyberfacist "Embargoes" or shilling a #Shitcoin #Scam named #MobileCoin!
And don't get me started on the #cyberfacism that is #CloudAct.
I may nit have allvthe.evidence yet, but #Signal stenches like #ANØM: #Honeypot-esque!
„Denn mit dem sog. #CloudAct hat die US-Regierung ihren Behörden…ein sehr mächtiges Werkzeug in die Hand gegeben. Diesem zufolge müssen US-Anbieter den US-Behörden auf Anfrage Zugriff auf alle Daten auf ihren Cloud-Servern ermöglichen – egal wo auf der Welt diese Server stehen“ via #SZ https://www.sueddeutsche.de/wirtschaft/eu-cloud-souveraenitaet-usa-li.3223398
@alwayscurious @froge @fj #CloudAct alone not, but it's just the tip of the iceberg.
Again: The only #security is #decentralization!
#Signal is as vulnerable as #EncroChat if it's not a #Honeypot like #ANØM!
@walkinglampshade @jrredho @fj It's basic #InfoSec, really:
Thus #Signal fails at protevting #Journalists and theor sources because they do have that data and can be #subopena'd for it if they don't already provide #BulkSurveillance & #LawfulInterception #API|s to comply with #CloudAct. (Or are you guys so naive and believe @Mer__edith will risk dying of old age in jail for non-paying users?)
And if you believe "this won't ne used/abused me because I'm from 'Murica!" and point at #ANØM as an example, then you really ignored all tze #Cyberfacism since 9/11…
@froge @fj I'm not replacing @signalapp with "random tools" but good options.
Like @delta & @thunderbird as well as @monocles / #monoclesChat & @gajim which work flawlessly over @torproject / #Tor using @tails / @tails_live / #Tails and @guardianproject / #Orbot respectably.
Considering the costs of even acquiring and upkeeping an #anonymous #SIM, I'd rather pay €2 p.m. for #XMPP+#OMEMO and #PGP/MIME-supported #eMail with the option of self-custody than $2,50+ p.m. just to keep a phone number.
Or is anyone here expecting @Mer__edith to risk jail for life amd not comply with #CloudAct?
It stenches like #ANØM, because NOTHING IS FOR FREE and running a #VCmoneyBurningParty is expensive...
@fj I still think @signalapp has fundamental flaws like demanding #PII (#PhoneNumbers can't be obtained anonymously around the globe and are trivial to track down to devices and thus users), being subject to #CloudAct as an unnecessary & 100% avoidable risk as well as #Shitcoin-#Scam shilling (#MobileCoin) and it's #proprietary, #SingleVendor & #SingleProvider nature that makes it inferior to real #E2EE with #SelfCustody like #PGP/MIME & #XMPP+#OMEMO!
@nemo Except #Signal demanding #PII like a #PhoneNumber, being subject to #CloudAct an shilling #MobileCoin, a blatant #Shitcoin #Scam disqualifies them!
@licho @osman provide evidence the code @signalapp released is actually being deployed.
git and builds it from source.Not to mention pushing a #Shitcoin-#Scam (#MobileCoin) disqualifies #Signal per very design!
https://www.youtube.com/watch?v=tJoO2uWrX1M
And don't even get me started on the fact.it's not sustainable to run it as a #VCmoneyBurningParty!
Same as identifying users: They already got a #PhoneNumber which in many juristictions one can't even obtain without #ID legally, thus making it super easy to i.e. find and locate a user. Even tze cheapest LEAs can force their local M(V)NOs to #SS7 a specific number...
Again: Signal has a #Honeypot stench, and you better learn proper #E2EE, #SelfCustody and #TechLiteracy because corporations can't pull the 5th [Amendment] on your behalf!
@osman, no because @signalapp is a #proprietary, #centealized, #SingleVendor & #SingleProvider solution that demands #PII like #PhoneNumbers for no valid reason, is subject to #CloudAct and only continues to exist because it's convenient as a means to fo #BulkSurveillance and mark it's users as #PeopleOfInterest.
Europe's Cloud Exodus: The Impact of Political Climate on Tech Dependency
As geopolitical tensions rise, European organizations are increasingly reconsidering their reliance on US cloud services. Concerns over privacy, data access, and the implications of the CLOUD Act are ...
@timixretroplays JFC for that money you get a better deal at @monocles & @Stuxhost !
And unlike #Microsoft365 they won't feed your data to Ubcle Sam (#GDPR) as they are not subject to #CloudAct...
1/10 Es gibt ein Gesetz aus den Vereinigten Staaten. Es heißt Cloud Act. Das bedeutet auf Deutsch: Gesetz über Daten in der Wolke. Es erlaubt amerikanischen Behörden, auf viele Daten zuzugreifen – sogar, wenn diese Daten nicht in Amerika gespeichert sind. #CloudAct
@700Sachen @Bingenberger @groso dann doch lieber auf #XMPP+#OMEMO über #Tor migrieren, weil da funzen Sprachnachrichten nicht statt #NSAbook mit extea #Stimmdaten zu füttern.die dank #CloudAct US-Regierungseigentum werden und/oder dann für #Deepfakes genutzt werden können.
Wer US-Software nutzt, gibt Kontrolle ab.
Deshalb werden Cyber-Versicherungen immer wichtiger.
Noch besser wäre es, die Risiken gar nicht erst einzugehen.
Wer sicher und unabhängig arbeiten will, sollte zu Linux wechseln.
#CloudAct #CyberVersicherung #Microsoft #Linux #EinfacheSprache
