• SleeplessCityLights@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    22 days ago

    Remember that most hacking is not done by breaking encryption and running code. It’s %100 social engineering. The weakest point is always a person.

    • earthworm@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      22 days ago

      Most activism groups aren’t really screening for membership.

      Usually it’s, “you want to join ? Cool, I’ll add you.”

      Edit: Just read the article. They went out of their way to try to make it sound like this group was up to something other than legally show up to immigrant court and keep watch for heinous police behavior.

      The memo did not provide any further details about the individual or their alleged past calls for violence and offered no specifics or evidence to explain why the FBI characterized them as “anarchist violent extremists”. The courtwatch efforts have been non-violent, and the FBI did not respond to an inquiry seeking specific examples of violence and did not answer questions about whether law enforcement had ongoing access to the private group.

    • vacuumflower@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      21 days ago

      Yes. And the only person I know to have interacted with state security agencies in professional area has told me a few times that any security system based on cryptography is of no real use. Like perpetuum mobile, snake oil, and so on.

      If your information is protected by cryptography, it could as well be protected by using “Aesopean language” or memorized by loyal courier or put on paper note in a secret place. You have a secret and a message, ultimately. If your secret place can be predicted, then your secret key can be stolen. If your loyal courier can be drugged\tortured\intimidated, so can be you or your addressee or your cryptography means’ providers to give up the secret key or the message contents or to sabotage your tools.

      “Aesopean language” is how they really do it for anything important, it’s pretty naturally learned from culture (one case where spy movies and such show it right), it doesn’t require niche expertise, and it does require common context that can’t be fully reconstructed in most cases. The fuzziness of meaning is a feature, so is the disconnect of responsibility.

      Unfortunately I’m autistic and impaired in that exact part of human communication, but honestly some of famous people whose jobs involve being enlightened black belt masters of that are autistic, so perhaps I’m just dumb.

      EDIT: But it’s funny that once I thought that the commonly imagined way this works is a trap for illiterate people, and technical means like cryptography are what really should be used. Perhaps, again, some sort of autistic compensation. Now I know better.

    • herseycokguzelolacak@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      This is why I don’t subscribe to the Signal E2EE hype cult.

      The fact that Signal doesn’t hide the anonymity of its users, and forces everyone to use phone numbers is a huge red flag.

      • youmaynotknow@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        21 days ago

        SimpleX is the way to go, always making sure you never say anything that can point to you in any chat.

        • iknowitwheniseeit@lemmynsfw.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          21 days ago

          Yeah, they caught the Dread Pirate Roberts because he leaked some account name, IIRC. There is no such thing as perfect opsec. 😬

  • root@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    22 days ago

    The FBI’s report from August, prepared by its New York division, does not make clear how the bureau accessed the Signal group

    The question I’m most curious to have answered

    • mienshao@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      22 days ago

      I’ve always felt like Signal isn’t half as secure as it claims to be, and articles like this don’t help that feeling…

      • THX-1138@lemmy.ml
        link
        fedilink
        English
        arrow-up
        0
        ·
        22 days ago

        Why’s that exactly… who’s not to say they just joined the huge group undercover? Or randomly added to a sensitive group aka the journalist debacle a few months ago.

        • mienshao@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          22 days ago

          I’m literally just talking, giving an opinion. Nothing was that fucking deep, just talking about my feelings about how a supposedly secure encrypted website was infiltrated by the motherfucking FBI…

          And I’m downvoted? Fucking why? Every day Lemmy gets a little more like Reddit. Shit like this is why the numbers go down. Just spread that negativity—make everyone feel like shit.

          Downvote this while you’re at it! Fuck yall!

      • Nima@leminal.space
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        edit-2
        21 days ago

        why is this downvoted? its not even that wild a comment. Signal fans need to chill a bit.

        edit: fanboyism is strong in this thread, damn.

        • 9bananas@feddit.org
          link
          fedilink
          English
          arrow-up
          1
          ·
          22 days ago

          because it’s completely unsubstantiated bullshit?

          why would anyone upvote “someone’s feelings” on a technical subject?

          this is a technology we’re talking about: there is an objective right and wrong, feelings are irrelevant. especially when those feelings are completely baseless.

          the better question is: why would anyone upvote this garbage?

  • THX-1138@lemmy.ml
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    22 days ago

    Wouldn’t be surprised if they went undercover as a member and was just accepted to the group.

    • h54@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      22 days ago

      My guess as well. Historically, the FBI has spent substantial resources infiltrating groups deemed even the smallest threat to state power.