And E2EE is only available on phones, circa a couple of years ago anyways
Terminal stage of console
- 2 Posts
- 43 Comments
Telegram’s servers are located in US, Singapore, Netherlands (and maybe some other countries) from what I’ve gathered. And all chats that are not E2EE’ed are stored there, encrypted at rest at best with keys in the same database, or somewhere else that can still be accessed in automated way. Maybe it is not even encrypted at rest.
The point is, all those countries are either in 5 eyes or have information sharing agreements with 5 eyes countries. So as far as I’m concerned, TLAs can still have their fingers in those pies, in addition to Telegram’s overall shadiness and Russian ties. So maybe you get KGB strongman keeping a watch over your chats too.
This is not something I’d have much confidence in to be honest.
Switch to Telegram
You know it’s not even E2EE by default, and when it is it uses a homegrown algo that is not exactly well spoken of? (at least V1)
ddnomad@infosec.pubtoHacker News@lemmy.smeargle.fans•Windows 11 Update 23H2 is stealing users' IMAP credentials
21·2 years ago“Stealing” is a stretch here but alright. That’s basically why I still use Apple Mail / Thunderbird on all my devices. All the swanky 3rd party clients are too keen on “enabling push notifications” by sending my credentials off to far shores.
ddnomad@infosec.pubto
science@lemmy.world•Harvard Scientists Find That Eating Red Meat Could Increase Your Risk of Diabetes
1·2 years agoOmega-3 is an EFA
My bad, “I’m not a scientist” bit me hard here lol, though I did read that if you get your omega-3 from plant sources (linolenic acid) its absorption rate is extremely low comparing to sources like salmon.
Regarding supplementation, I feel like having to do that because of inherent issues with your diet is somewhat of a dirty hack (I do take some supplements though, so I’m not gonna pretend like it is not an option).
ddnomad@infosec.pubto
science@lemmy.world•Harvard Scientists Find That Eating Red Meat Could Increase Your Risk of Diabetes
2·2 years agoEven taking this claim at face value, we would have to solve plant based diet issues, such as insufficiencies in some vitamins (e.g. B12), complexity of getting sufficient amount of essential amino acids
(esp. omega-3)and omega-3, slow but steady reduction in an overall amount of nutrients present in both vegetables and fruits etc.And if we say that the answer is to “engineer” foods: fortify grains with vitamins, come up with “equivalent on paper” diary replacements (e.g. oat “milk”) etc, then we need to ask ourselves whether this is actually the answer? Can we effectively reduce foods to a small number of “key ingredients” and add them everywhere? Is this sustainable? What about the environmental impact of running all those factories that “engineer” plant-based alternatives to the foods our ancestors ate for generations?
I do not know the answer, I’m no scientist, nor proponent of any specific way forward. I just read stuff. The only thing that I do believe is that there is no silver bullet.
Books I find very interesting:
UPDATE: Corrected that Omega-3 is indeed not an amino acid
ddnomad@infosec.pubto
science@lemmy.world•Harvard Scientists Find That Eating Red Meat Could Increase Your Risk of Diabetes
51·2 years agoThe article you’ve linked ignores two very important points: how much of that land is marginal (not suitable for growing crops) and the fact that our monoculture approach to growing crops is as much (if not more) devastating to our environment.
There’s no way to put it apart from “humans destroy habitats”, and I don’t think that it makes much difference whether the land was dedicated for grazing or crops.
ddnomad@infosec.pubto
science@lemmy.world•Harvard Scientists Find That Eating Red Meat Could Increase Your Risk of Diabetes
478·2 years agoAny study that mashes together processed and unprocessed meat in epidemiological setting is next to meaningless in my opinion. You can associate basically anything this way.
Guess where read meat and processed meat intersect? McDonald’s, for example. Now tell me that eating sirloins kills me.
ddnomad@infosec.pubto
Privacy@lemmy.ml•Why do password managers charge for TOTP code generation?
1·2 years agoIt is reasonable yet subpar under a threat model where you do not trust any single provider, which is a model I find appropriate most of the time.
ddnomad@infosec.pubto
Privacy@lemmy.ml•Why do password managers charge for TOTP code generation?
1·2 years agoYou should not assume your password manager is unhackable.
That’s my main point. Perfect is an enemy of good indeed, but I feel that doing things properly the first time is a good idea in general, especially when it as easy as using a different app for your TOTP tokens. It’s a low hanging fruit really.
ddnomad@infosec.pubto
Privacy@lemmy.ml•Why do password managers charge for TOTP code generation?
2910·2 years agoPlease don’t use your password manager for TOTP tokens. It is called two factor authentication for a reason.
ddnomad@infosec.pubto
Privacy@lemmy.ml•Britain Admits Defeat in Controversial Fight to Break Encryption
381·2 years agoUntil next time they try to push through something similarly stupid. Now it’s EU’s turn to make their mind too.
ddnomad@infosec.pubtoUnixporn@lemmy.ml•[Meta] This community usually has 1 or 2 posts a day, but the last one is from 3 days ago. Is something happening?
261·2 years agoTbh I’d not be surprised if that’s the case. Last time I had enough time to spare to rice me some arches was all the way back when I was in uni :(
I barely have enough time to hotfix my dotfiles nowadays :/
And the cringe inducing lttstore and “no sponsored fragment” plugs. Like somehow it sounds like your typical
apology.jpegand “haha funny-funny jokesies” at the same time.
Type hints are cool. Runtime enforced type hints are cooler.
Mullvad is trusted. They are pretty open with their policies, exist for a long time already, not involved in any privacy scandals (to my best knowledge), charge flat and fair fee without 60% sales and other dubious marketing practices. It is one of the better VPN providers, not in 5/9 eyes (they are in 14 eyes though), you can buy a subscription with crypto, which (assuming crypto was acquired anonymously too) is a good start for some privacy guarantees.
Pretty much every cyber security professional I know uses Mullvad in one way or another, usually as part of a more complex solution.
But all in all, please bear in mind that VPN is not some magic silver bullet to preserve your privacy and anonymity. With VPNs you basically shift your trust from your ISP to the VPN provider. That trust you put into the provider, it is still a requirement. Not to mention that a good chunk of tracking is happening on a lower level nowadays, so if you use Mullvad on Windows / any Apple device etc. do not expect to become untraceable :)







lol