The makers of Signal are well aware of these technical limitations and are researching ways to push the boundaries of what's possible. For secure, private, end-to-end encrypted communication, though, unless you have a large nation-state or three in your threat model, and you're technically proficient, you should not be using PGP. If you are a software developer, using PGP to sign your code is a must. No security software can be effective if it is unusable by its target audience, and PGP is so finicky to use that it is extremely easy to shoot yourself in the foot with it.
PGP, once bleeding edge cryptography for the masses, has fallen behind the times. or Five Eyes, then they have mass surveillance access to all Signal traffic and know who is talking to whom, when and for how long. What about the metadata? Any network-level adversary can tell that you're using Signal, for starters, and if your adversary is the U.S. It looks and feels just like any other messaging app but under the hood uses encryption that, to the best of our knowledge, not even the National Security Agency can brute-force. Signal is the best-of-breed encrypted messaging app that lets you send text messages and voice memos as well as voice calls and audio calls. You may have heard the mantra, "Use Signal, use Tor," and while this one-two punch combo is a great start, it won't take down your opponent. Here are some steps to being completely, absolutely, but not really, only a little bit anonymous. We used to live in the "real world" and "go online." Now we live online, and things like geotracking of cell phones, facial recognition in public physical spaces, and so forth mean no amount of "online anonymity" will help you if your meatspace self is not also anonymous, which is nearly impossible these days.
Who you're talking to, when, for how long, how many messages, size of attachments, type of communication (text message? email? voice call? voice memo? video call?), all this information is not encrypted and is easily discoverable by sophisticated hackers with a mass surveillance apparatus, which is most these days.Ī final thought before we dig into specific technical tools: "Online" is now a meaningless word. An encrypted message may protect your privacy - because (hopefully) no one else can read it besides you and your recipient - but encryption does not protect the metadata, and thus your anonymity. We are using privacy and anonymity interchangeably, and this is incorrect. The universe does not appear to believe in anonymity, however, as it requires significant work to remain anonymous.
The universe believes in encryption, a wise man once opined, because it is astronomically easier to encrypt than it is to brute force decrypt.
0 kommentar(er)
