XMPP:

https://www.vultr.com/docs/how-to-setup-an-openfire-xmpp-server-on-centos-7

https://www.digitalocean.com/community/tutorials/how-to-install-ejabberd-xmpp-server-on-ubuntu

Project Name Platforms
Apache Vysper Linux / Windows
AstraChat Linux / macOS / Solaris / Windows
ejabberd Linux / macOS / Windows
IoT Broker Windows
Isode M-Link Linux / Windows
jackal Linux / macOS
Metronome IM Linux
MongooseIM Linux / macOS
Openfire Linux / macOS / Solaris / Windows
Prosody IM BSD / Linux / macOS
Tigase XMPP Server Linux / macOS / Solaris / Windows
Wokkel Linux / macOS / Solaris

https://xmpp.org/software/servers.html

The Swizz Crypto AG surveillance scandal: Many governments trusted Crypto AG (defunct 2018)

“Russia was never stupid enough to buy this f***ing product”

https://archive.org/details/youtube-7YBgjVOhtIk

Signal is also from Switzerland

will user trust it?

nope X-D

Consider bringing a secondary mobile device

“Before covering a protest, consider what data you’re bringing to the event, and what kinds of evidence you hope to take away.

You also want to think about what would happen if any of that information left your custody.

Depending on your situation, your devices might be lost, stolen, or confiscated by any number of groups — bystanders, demonstrators, authorities, and others.

Ask yourself a few questions before attending the event:

  1. Do you have any sensitive data on your devices?
  2. How likely do you think it is that a third party could get access to your devices?
  3. Who could get access to your devices, and what might they be able to do?
  4. Do your web-connected devices have access to remote services, such as your email?
  5. Are there sensitive details that you need to obscure before publication, such as the identities of those involved? Would it be acceptable for them to be seen by someone before publication?”

rules: https://freedom.press/training/blog/how-journalists-can-protect-themselves-while-covering-protests/

what shall users use?

audio conferencing: mumble (100% Open Source server and client unlimited users)

messaging:

https://f-droid.org/en/packages/im.vector.alpha/

Freedom of the Press recommends: Signal

“Signal is generally regarded as the gold standard in the security community. Signal offers end-to-end encryption, and through its open source implementation and public disclosure of court documents, the team has demonstrated both hardened encryption and minimal user data retention. At Freedom of the Press, these are reasons we so often recommend it to journalists. For the purposes of video conferencing, however, it’s constrained to only two users. It’s likely great for intimate conversations, but won’t support a larger group video chat. Likewise, it requires users to register with a phone number, and share that number with conversational partners. You could run your own Signal server, but because it won’t play nice with the central Signal servers it would likely be a lonely experience.” (src)

more https://www.eff.org/deeplinks/2020/06/surveillance-self-defense-attending-protests-age-covid-19

what is the problem?

as one might know the word “thoughtcrime” is a 1984 word. (pretty much the direction almost the whole world is going, accumulating data on all citizens, trying to know, what they will think and vote tomorrow, in order to manipulate the masses today)

so it is official.

if one installs a Messenger like WhatsApp, Telegram or Signal on an alternative (hopefully privacy protecting) OS like LineageOS on an Android Smart Phone (which is basically a fully featured ARM-Computer with a high speed mobile data modem)

then it is privacy wise just as compromised as if one leaves the stock-firmware on it.

(also the qualcomm chips just as broadcom network chips can not be trusted)

one fine day, sshed into one’s android phone: (192.168.0.100)

# it is rooted so this works
su - root;
netstat -tulnp > connections.txt
vim connections.txt; # YES! it comes with FULL VIM v8.1.1511 :)
tcp        0      0 192.168.0.100:48459     149.154.167.92:443      ESTABLISHED 11491/org.telegram.messenger
whois 149.154.167.92
->

inetnum: 149.154.164.0 – 149.154.167.255
netname: Telegram_Messenger_Network
descr: Telegram Messenger Network
country: GB
geoloc: 52.379189 4.899431 (points to the City Center of Amsterdam)
admin-c: ND2624-RIPE
tech-c: ND2624-RIPE
abuse-c: TMI12-RIPE
status: ASSIGNED PA
mnt-by: MNT-TELEGRAM
created: 2014-09-19T22:29:39Z
last-modified: 2018-06-12T10:52:20Z
source: RIPE

person: Nikolai Durov
address: P.O. Box 146, Road Town, Tortola, British Virgin Islands, but HQ is in SAUDI ARABIA X-D
phone: +357 96 287319
nic-hdl: ND2624-RIPE
mnt-by: MNT-TELEGRAM
created: 2014-03-07T19:25:00Z
last-modified: 2014-03-08T03:31:36Z
source: RIPE

% Information related to ‘149.154.164.0/22AS62041’

route: 149.154.164.0/22
descr: Telegram Messenger Amsterdam Network
origin: AS62041
mnt-by: MNT-TELEGRAM
created: 2014-05-14T18:59:01Z
last-modified: 2014-05-14T18:59:01Z
source: RIPE

https://en.wikipedia.org/wiki/Telegram_(software)

Headquarters London, United Kingdom
(legal domicile)
Dubai, United Arab Emirates
(operational center)

UAE is particularly known for close cooperation with USA and not protecting journalists or activists.

they are just US-henchmen with US-dollars and US-guns and lived quiet well on this cooperation.

tcp6       0      0 ::ffff:192.168.0.:46247 ::ffff:104.20.20.23:443 ESTABLISHED 10437/im.vector.app
-> Riot.im messenger (probably still the best in terms of privacy)
https://f-droid.org/en/packages/im.vector.alpha/
tcp6       0      0 ::ffff:192.168.0.:47333 ::ffff:157.240.20.5:443 ESTABLISHED 27431/com.whatsapp
-> 
NetRange:       157.240.0.0 - 157.240.255.255
CIDR:           157.240.0.0/16
NetName:        THEFA-3
NetHandle:      NET-157-240-0-0-1
Parent:         NET157 (NET-157-0-0-0-0)
NetType:        Direct Assignment
OriginAS:       
Organization:   Facebook, Inc. (THEFA-3)
RegDate:        2015-05-14
Updated:        2015-05-14
Ref:            https://rdap.arin.net/registry/ip/157.240.0.0

OrgName:        Facebook, Inc.
OrgId:          THEFA-3
Address:        1601 Willow Rd.
City:           Menlo Park
StateProv:      CA
PostalCode:     94025
Country:        US
RegDate:        2004-08-11
Updated:        2012-04-17
Ref:            https://rdap.arin.net/registry/entity/THEFA-3

tcp6       0      0 ::ffff:192.168.0.:48563 ::ffff:76.223.92.16:443 ESTABLISHED 6491/org.thoughtcrime.securesms
tcp6       0      0 ::ffff:192.168.0.:48564 ::ffff:76.223.92.16:443 ESTABLISHED 6491/org.thoughtcrime.securesms
-> is the Signal.org messenger, runs on Amazon Cloud, which is basically a US-Intel(NSA/CIA etc.) datacenter

Links:

“Surveillance Self-Defense” – Tips, Tools and How-tos for Safer Online Communications – A Project of the Electronic Frontier Foundation -> https://ssd.eff.org/

https://web.archive.org/web/20160313004710/http://lehnhof.net/2014/02/threema-vs-telegram-vs-textsecure-whatsapp-messaging-android/

admin