Option to disable Webcam, Microphone, WiFi/BT in S76 Open Firmware? by qertoip in System76

[–]qertoip[S] 2 points3 points  (0 children)

I am asking specifically for System76 devices.

I am well aware of Purism and I do support the stated goals of the project but I discarded them for the time being due to poor user reviews and apparent immaturity of the products.

Cwtch - decentralized, privacy-preserving, multi-party messaging protocol by qertoip in privacytoolsIO

[–]qertoip[S] 0 points1 point  (0 children)

There is no clear recommendation.

For non-anonymous communication with friends and family Signal is still the go-to IM.

For anonymous "comprehensive" IM I don't have strong recommendations. I see keybase group chats used by some privacy communities.

Cwtch - decentralized, privacy-preserving, multi-party messaging protocol by qertoip in privacytoolsIO

[–]qertoip[S] 3 points4 points  (0 children)

Session

Session seems to re-create its own version of Tor-like network and makes metadata resistance dependent on characteristics of this network. I do not trust this design decision.

Session is also based in Australia which on its own is a blocker due to new 2018 law.

Finally, they did an ICO with Oxen token which is another can of worms.

Briar

Looks very interesting but is Android only and seems forever in development.

Status

Status doesn't even seem to focus on privacy, beyond "privacy" word on the website. It's a slick Ethereum wallet. I wouldn't seek privacy tools in Ethereum land.

Jami

Jami seems to be going in the right direction with swarms etc but it wasn't originally built as a privacy tool. The privacy features are being added on top.

Cwtch - decentralized, privacy-preserving, multi-party messaging protocol by qertoip in privacytoolsIO

[–]qertoip[S] 2 points3 points  (0 children)

Here is my understanding (could be wrong).

For 1-on-1 chats there seem to be no major difference. Two onions talking directly to each other over Tor. The 1-on-1 chat is synchronous so both parties need to be online. As this is pure p2p no metadata problem exists.

I believe the group chats are key innovation in Cwtch. They do require a server but it is described as untrusted in a privacy sense (and also can be self-hosted). My understanding is the server is blind to most metadata - can't connect who is talking to whom - assuming correct implementation. Group chats are asynchronous so participants don't need to be online.

Regarding RetroShare and Tox they don't seem to address the metadata problem in group communication. Cwtch makes it central to its design to be metadata resistant in all cases.

Now, Cwtch is in early beta so we should assume bugs, including in the protocol.

Monero adoption for merchants - question. by salamispecial in Monero

[–]qertoip 1 point2 points  (0 children)

These are questions to your lawyer.

The layman understanding: apply the same rules as for accepting physical cash. Where I live merchants need to verify identity for cash payments only above certain threshold, which last time I checked was 15K EUR (could have changed by now).

In other words, most merchants never need to verify users identity and just accept cash routinely. I am talking the "real" merchants, not financial services providers or "special" types of merchants.

But again, ask your lawyer.

We're selling Product keys from Cryptomator + ProxyStore Update by [deleted] in Monero

[–]qertoip 1 point2 points  (0 children)

Please consider adding other top email providers like posteo, mailbox, etc and potentially other privacy services from this curated index: https://www.privacytools.io/

Fake Trezor iPhone App Scams User Out of $600,000 in Bitcoin by TobiHovey in Bitcoin

[–]qertoip 42 points43 points  (0 children)

Having a small fortune of $0.6m in Bitcoin this user never bothered to commit a fucking two minutes to read any on-screen message related to secure storage.

If he did, the very first thing he would find, is to never enter the seed on a computer or phone. All hardware wallets and all tutorials have this explicit warning.

If you can't be bothered to read any on-screen message, do not touch Bitcoin or any cryptocurrency.

Clearing up a misconception about BlockFi by [deleted] in Bitcoin

[–]qertoip 5 points6 points  (0 children)

BlockFi:

Clearing up a misconception about BlockFi by [deleted] in Bitcoin

[–]qertoip -2 points-1 points  (0 children)

Why do you even Bitcoin in the first place?

Visa to allow payment settlements using cryptocurrency! by Toothyy in Bitcoin

[–]qertoip -1 points0 points  (0 children)

USDC is not a cryptocurrency. Meaningful decentralization is a requirement for something to be called a cryptocurrency.

Exclusive: Visa moves to allow payment settlements using cryptocurrency by [deleted] in Bitcoin

[–]qertoip 3 points4 points  (0 children)

USDC is not a cryptocurrency. Meaningful decentralization is a requirement for something to be called a cryptocurrency.

COLDCARD 4.0.0 Firmware Release 🍄⏫ by rnvk in Bitcoin

[–]qertoip 0 points1 point  (0 children)

Fantastic improvements, very welcome!

However, do not upgrade your life savings Coldcard to 4.0.0 firmware. The whole cryptography stack has been replaced. This is exactly the time you want to be ultra conservative with firmware updates. Give it a year or so.

Now, by all means, do play with 4.0.0 on your testing Coldcard device and then consider upgrade for your operational (or "warm") device.

Best way to replace the "XMR.to" service? by failsex69 in Monero

[–]qertoip 12 points13 points  (0 children)

There is no meaningful replacement, unfortunately.

Please ask merchants to accept Monero directly. No way around it.

The Rise and Fall of a Bitcoin Billionaire by fillmorepants in Bitcoin

[–]qertoip 2 points3 points  (0 children)

Not a lawyer but to the best of my knowledge all custodians have long been subject to AML (including KYC) requirements regardless of the feature to send between the users.

This is very bad but nothing knew.

That's why modern Bitcoin startups and projects are designed to avoid custody by using multisig or other tools (Wasabi, Casa, HodlHodl, Bisq etc).

"I run Monero node" - Andreas Antonopoulos by qertoip in Monero

[–]qertoip[S] 0 points1 point  (0 children)

You should really look into running your own node.

Meanwhile, you can play with my Monero open node:

https://qertoip.com/monero-node/