|Apache Vysper||Linux / Windows|
|AstraChat||Linux / macOS / Solaris / Windows|
|ejabberd||Linux / macOS / Windows|
|Isode M-Link||Linux / Windows|
|jackal||Linux / macOS|
|MongooseIM||Linux / macOS|
|Openfire||Linux / macOS / Solaris / Windows|
|Prosody IM||BSD / Linux / macOS|
|Tigase XMPP Server||Linux / macOS / Solaris / Windows|
|Wokkel||Linux / macOS / Solaris|
The Swizz Crypto AG surveillance scandal: Many governments trusted Crypto AG (defunct 2018)
“Russia was never stupid enough to buy this f***ing product”
Signal is also from Switzerland
will user trust it?
Consider bringing a secondary mobile device
“Before covering a protest, consider what data you’re bringing to the event, and what kinds of evidence you hope to take away.
You also want to think about what would happen if any of that information left your custody.
Depending on your situation, your devices might be lost, stolen, or confiscated by any number of groups — bystanders, demonstrators, authorities, and others.
Ask yourself a few questions before attending the event:
- Do you have any sensitive data on your devices?
- How likely do you think it is that a third party could get access to your devices?
- Who could get access to your devices, and what might they be able to do?
- Do your web-connected devices have access to remote services, such as your email?
- Are there sensitive details that you need to obscure before publication, such as the identities of those involved? Would it be acceptable for them to be seen by someone before publication?”
what shall users use?
audio conferencing: mumble (100% Open Source server and client unlimited users)
Freedom of the Press recommends: Signal
“Signal is generally regarded as the gold standard in the security community. Signal offers end-to-end encryption, and through its open source implementation and public disclosure of court documents, the team has demonstrated both hardened encryption and minimal user data retention. At Freedom of the Press, these are reasons we so often recommend it to journalists. For the purposes of video conferencing, however, it’s constrained to only two users. It’s likely great for intimate conversations, but won’t support a larger group video chat. Likewise, it requires users to register with a phone number, and share that number with conversational partners. You could run your own Signal server, but because it won’t play nice with the central Signal servers it would likely be a lonely experience.” (src)
what is the problem?
as one might know the word “thoughtcrime” is a 1984 word. (pretty much the direction almost the whole world is going, accumulating data on all citizens, trying to know, what they will think and vote tomorrow, in order to manipulate the masses today)
so it is official.
if one installs a Messenger like WhatsApp, Telegram or Signal on an alternative (hopefully privacy protecting) OS like LineageOS on an Android Smart Phone (which is basically a fully featured ARM-Computer with a high speed mobile data modem)
then it is privacy wise just as compromised as if one leaves the stock-firmware on it.
one fine day, sshed into one’s android phone: (192.168.0.100)
# it is rooted so this works su - root; netstat -tulnp > connections.txt vim connections.txt; # YES! it comes with FULL VIM v8.1.1511 :) tcp 0 0 192.168.0.100:48459 184.108.40.206:443 ESTABLISHED 11491/org.telegram.messenger whois 220.127.116.11 ->
inetnum: 18.104.22.168 – 22.214.171.124
descr: Telegram Messenger Network
geoloc: 52.379189 4.899431 (points to the City Center of Amsterdam)
status: ASSIGNED PA
person: Nikolai Durov
address: P.O. Box 146, Road Town, Tortola, British Virgin Islands, but HQ is in SAUDI ARABIA X-D
phone: +357 96 287319
% Information related to ‘126.96.36.199/22AS62041’
descr: Telegram Messenger Amsterdam Network
|Headquarters||London, United Kingdom
Dubai, United Arab Emirates
UAE is particularly known for close cooperation with USA and not protecting journalists or activists.
they are just US-henchmen with US-dollars and US-guns and lived quiet well on this cooperation.
tcp6 0 0 ::ffff:192.168.0.:46247 ::ffff:188.8.131.52:443 ESTABLISHED 10437/im.vector.app -> Riot.im messenger (probably still the best in terms of privacy) https://f-droid.org/en/packages/im.vector.alpha/ tcp6 0 0 ::ffff:192.168.0.:47333 ::ffff:184.108.40.206:443 ESTABLISHED 27431/com.whatsapp -> NetRange: 220.127.116.11 - 18.104.22.168 CIDR: 22.214.171.124/16 NetName: THEFA-3 NetHandle: NET-157-240-0-0-1 Parent: NET157 (NET-157-0-0-0-0) NetType: Direct Assignment OriginAS: Organization: Facebook, Inc. (THEFA-3) RegDate: 2015-05-14 Updated: 2015-05-14 Ref: https://rdap.arin.net/registry/ip/126.96.36.199 OrgName: Facebook, Inc. OrgId: THEFA-3 Address: 1601 Willow Rd. City: Menlo Park StateProv: CA PostalCode: 94025 Country: US RegDate: 2004-08-11 Updated: 2012-04-17 Ref: https://rdap.arin.net/registry/entity/THEFA-3 tcp6 0 0 ::ffff:192.168.0.:48563 ::ffff:188.8.131.52:443 ESTABLISHED 6491/org.thoughtcrime.securesms tcp6 0 0 ::ffff:192.168.0.:48564 ::ffff:184.108.40.206:443 ESTABLISHED 6491/org.thoughtcrime.securesms -> is the Signal.org messenger, runs on Amazon Cloud, which is basically a US-Intel(NSA/CIA etc.) datacenter