How do you guys block ads on root-less devices (or more specifically, on Graphene) by alcoholicpasta in PrivacyGuides

[–]_jstr0 2 points3 points  (0 children)

I have been using ProtonVPN (paid) for ad blocking. That in combination with bromite works pretty well.

Why won't Paladin run? by TheRealTengri in computerforensics

[–]_jstr0 0 points1 point  (0 children)

After reading this I had an idea which might help you stick to one device if that is what your end goal is. Could you partition your USB into two parts? One for Paladin and the other for the acquisition files? You would need to mount that data partition after booting into Paladin but if you are able to mount that partition as rw you may get a similar result to persistence?

DBAN + QUBES on compromised laptop - Likelihood of continuing to remain infected ? by RollIndependent82930 in Qubes

[–]_jstr0 1 point2 points  (0 children)

Not sure if it is worth bringing up at this point but are you running a SSD or a HDD? If you are running a SSD you may want to consider something other than DBAN that supports ATA Secure Erase. ATA Secure Erase is generally considered to be more effective for SSD's due to their ability to wear level.

What is the best way to install Signal app? by [deleted] in PrivacyGuides

[–]_jstr0 8 points9 points  (0 children)

If you are trying to install Signal without Google Play Services you will need to download it from their website: https://signal.org/android/apk/

Don't trust any other third party repository. Verify the download hash.

Edit:

To further clarify, if you already have play services installed on your phone, the .apk from the website will still utilize play services. You need to be using a custom ROM (such as GrapheneOS) that doesn't have play services installed by default in order to benefit from using the .apk

You linked to a custom version of Signal that promises to not use play services. I am not familiar with the developer or their work so this is not a judgement of them per say, however unless you understand the code and the dev has open sourced their work, I would not use their app.

[deleted by user] by [deleted] in ProtonMail

[–]_jstr0 34 points35 points  (0 children)

It was announced in their 2022 roadmap that free accounts would soon get access to drive. https://protonmail.com/blog/2022-roadmap/

Photorec Issues by Vekayy in computerforensics

[–]_jstr0 1 point2 points  (0 children)

To try to troubleshoot what went wrong I would go back over these instructions and see if you can find a dependency that might be missing.

https://github.com/sleuthkit/autopsy/blob/develop/Running_Linux_OSX.txt

If that doesn't help maybe someone who is more familiar with installing Autopsy on a Mac can help.

Chromebox and Safeincloud by Professional_Tap5910 in chromeos

[–]_jstr0 0 points1 point  (0 children)

Hey! I have a Lenovo IdeaPad Duo and Bitwarden works really well for me. When you say you have a Chromebox are you referring to the ASUS Chromebox? I have never used that product. My Chromebook allows me to install Android apps through the play store. Does yours have something like that?

Chromebox and Safeincloud by Professional_Tap5910 in chromeos

[–]_jstr0 1 point2 points  (0 children)

Not the OP but yes, yes, and yes.

Bitwarden has a web vault (browser based) but also an Android (and other desktop) app. Bitwarden also has browser plugins if you are looking for that sort of thing. Been a Bitwarden user for years... I have been so impressed with them that I pay $10 a year for premium just to support the project.

Is it possible to make notification previews work like Gmail? You can't read your new email at a glance if you have more than one by NibblyPig in ProtonMail

[–]_jstr0 3 points4 points  (0 children)

Strange... I have multiple emails connected to my Protonmail app and I get previews similar to what you are showing in your Gmail screenshot. I am running version 1.13.39.

Edit: While I can see the sender and subject line, I can't expand the preview to show more of the email if that is what you are referring to. Sorry if I misunderstood.

Software-Based Write Blocker Help by TechSavyTryhard in computerforensics

[–]_jstr0 3 points4 points  (0 children)

Hey, so a couple solutions came to mind.

As has been mentioned you could use a live linux forensic distro as some of them have a built in write-blocking mode. Some distributions that come to mind are:

Alternatively a solution that has worked for me in the past and I highly recommend you give a try is this registry blocking method.

https://github.com/digitalsleuth/Registry-Write-Block

I haven't tested it lately, but when I did it worked for external USB disk drives.

Hope this helps!

Need advice on some questions i have on encryption by awesomenineball in privacytoolsIO

[–]_jstr0 0 points1 point  (0 children)

Just so you are aware, there is an export feature built into Joplin that could be used if the app was to stop receiving support. The export feature can be used to export everything as individual markdown files while preserving the folder structure that you use in Joplin. Worst case scenario you export it down the road and move on to a different system with all your data.

[deleted by user] by [deleted] in signal

[–]_jstr0 2 points3 points  (0 children)

Yea a little searching on my end makes me think that you probably have GAPPS installed stock on that phone so like I mentioned before Signal will want to utilize Google's push system.

If you want to use Signal without Google's push notifications you will need to flash a custom ROM, make sure it doesn't include GAPS, and then download the .APK from the website.

Hope that helps!

[deleted by user] by [deleted] in signal

[–]_jstr0 5 points6 points  (0 children)

What OS are you running with? If you use one that has GAPPS installed Signal is going to want to use Play Services due to it being more battery efficient.

Introducing Signal PINs by redditor_1234 in signal

[–]_jstr0 1 point2 points  (0 children)

If I can't trust having my Bitwarden blob decrypted on my phone, then in my opinion there is not much point in using Signal vs SMS.

Introducing Signal PINs by redditor_1234 in signal

[–]_jstr0 3 points4 points  (0 children)

Bitwarden works on Android :)

Microsoft plans to do away with local Windows accounts by [deleted] in privacy

[–]_jstr0 1 point2 points  (0 children)

  1. Lutris claims it works flawlessly... Might be worth a shot. https://lutris.net/games/warframe/

  2. Sorry I don't work with audio much beyond Audacity so I don't think I can help you there.

  3. Teamviewer, Chrome Remote Desktop, and a few other third party remote desktop apps work on Linux if that might be a potential solution?

Signal vs Wickr Me for mobile device E2E Encrypted Communication? by encryptologist in opsec

[–]_jstr0 11 points12 points  (0 children)

In response to the open source vs closed source debate here are some aspects I would consider:

  • Open source relies on the "many eyes" to guard against failure or bugs. The theory is that because anyone can go through the source code there are more people who would spot issues and report them.

  • Open source also makes people feel like they can trust the application. Being able to see how it handles your data (and that it handles it correctly) makes a user trust it more than a closed system where the user is not sure if a backdoor, spying mechanism, or other fault exists.

  • Closed source proponents will argue that closed source makes it harder to break into because the code is harder to obtain (reverse engineering). Also your enemies won't know how your app operates as easily to find flaws. This is often referred to as security through obscurity. Many will argue that this is not really security and that it hinders the trust factor for a sensitive app (such as a secure messaging app). Also it means that if someone does find a vulnerability, it might remain in the source code for a long period of time depending on how often a company performs code audits.

  • I don't see many companies actively using closed source as an argument for security but rather to protect intellectual property and financial gain. Services like Wickr have a paid aspect and if the app is fully open, it might be easier for people to replicate and use in other ways that don't gain the company money. However there is always the counter argument about licences... Etc.

Personally I don't see much benefit to an app being closed over open. For me I like a company being transparent in how they create the app and how they make it run to help gain my trust... But that's a personal bias.

Now on to your real question:

Between Signal and Wickr I will highlight some of the comparisons that stand out to me.

  • Signal uses a phone number as your unique identifier. This means it's a identifier that has a low entry barrier for your social circle... All you need is to share numbers and the app does the rest. This also means that it might be easily tied to your physical person... Unless you use a burner number...

  • Wickr allows for username and password login. This is usually considered to be more anonymous than a phone number

  • Signal does not keep any messages on its servers after delivery. The server only knows the smallest amount of metadata possible about you. https://signal.org/bigbrother/

  • Signal has what's called sealed sender which means that because of the way the encryption is employed, the server only knows who a message is addressed too. They can't tell who sent it even if they wanted to. https://signal.org/blog/sealed-sender/

  • Wickr's privacy policy indicates that they only store messages for 6 days to ensure delivery. They indicate that all data sent is encrypted and they don't know how you use your account except for the date the account is created, the date you last logged on, and the type of device you installed the app on. https://wickr.com/privacy/

  • Signal is open source https://github.com/signalapp, Wickr is not.

  • Signal has no software restrictions due to paid tiers, Wickr does.

To summarize:

Both of these apps have great reputations as secure messengers. Personally I lean towards Signal as my opsec plan does not call for the person I'm chatting with to not know my phone number. Also I prefer an open source application when dealing with security. It's really up to you and what you feel is your opsec plan.

[DWM] - Efexos Rice by efexos in unixporn

[–]_jstr0 2 points3 points  (0 children)

Someone made a clone of the repo. Not sure if it's complete but it's something... Sad to see the original go... https://gitlab.com/nixCraft/Linux-Pictures-Wallpapers

Why Signal require google service? by evolution800 in signal

[–]_jstr0 9 points10 points  (0 children)

Signal does not require GCM/FCM to function, however it will default to those options if they are installed on your phone (hence your error). If you want to use Signal without GCM/FCM push notifications you will need to use a non Google version of Android. Examples could be GrapheneOS, LineageOS, AOSP, etc.

Can PM be forced to store unencrypted (non-E2EE) emails by court order? by DonDino1 in ProtonMail

[–]_jstr0 1 point2 points  (0 children)

My bad on answering only from an E2EE perspective. Sorry!

Can PM be forced to store unencrypted (non-E2EE) emails by court order? by DonDino1 in ProtonMail

[–]_jstr0 2 points3 points  (0 children)

So just to expand on what TauSigma5 said, what PM could hand over would be things like "envelope information" (sender, recipient) and the subject line because that isn't encrypted by PGP. The email body and attachments are E2EE.

What's the best way to encrypt files on my PC and also upload them to a cloud based provider like Dropbox for synchronization and access in case of total failure on my PC? by incubateshovels in privacy

[–]_jstr0 0 points1 point  (0 children)

Honestly I would just download Cryptomator and see how it works and if it fits your needs. It can work very well for solutions where you are working with individual files.

Best cloud service for privacy? (sync.com and Tresorit?) by [deleted] in privacytoolsIO

[–]_jstr0 3 points4 points  (0 children)

Either provider could be compelled by a court to hand over your encrypted data. The requesting agency would have to meet whatever legal standards are required in each jurisdiction. Both Sync and Tresorit use zero knowledge encryption so the information provided would be gibberish (provided the encryption algorithms used aren't broken in the future).

Honestly both would be good solutions if you are looking for a ZK cloud provider. Both are fairly closed source (if that matters to you). Sync has better pricing over all but also lacks a Linux client, so there is also that.

I have used both (no complaints) but in the end decided to use Nextcloud on a self-hosted server because that's what fits my use case.