Remote

Skyper 💻🎧☕📖

@Skyper@fosstodon.org

mastodon 4.7.3

Self-educated since my childhood, I am a #technology and #science lover with a deep passion for IT, #InfoSec, #FOSS, and I am also obsessed with automation.

I work for myself and provide IT engineering services through @SkypLabs@infosec.exchange.

0 Followers

0 Following

17 Posts

Joined November 06, 2022

Blog:

https://blog.skyplabs.net

Codeberg:

https://codeberg.org/Skyper

GitHub:

https://github.com/SkypLabs

Languages:

🇫🇷 🇬🇧 🇪🇸

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 12mo ago

Replying to

@Tutanota @protonprivacy To be clear, my goal here isn't to take sides. In fact, I'm a loyal Tuta customer since 2016, for both my work and personal accounts. But as a security practitioner, I just cannot decently recommend your services to people with high security requirements, and I cannot stand your security theater any more. Be more humble and do what it takes to be the best if it's your goal. #Security #Privacy #OpenSource #Transparency #TheatModeling #Email #E2EE #Tuta #Tutanota #Proton

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 7mo ago

Replying to

@via4@mastodon.social @ente@fosstodon.org How would you design a server component whose goal is to store E2EE'd files without being able to count the number of encrypted files sent to it? And how would you handle quota management per user subscription without metrics? Anyway, Ente's encryption technical design is available here: https://ente.io/architecture

ente.io

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 6mo ago

@protonprivacy@mastodon.social Hi Proton team. Just some feedback on your last blog post titled "Congress is about to renew warrantless surveillance. And VPN users are caught in the middle". Could you please stop framing your text just like if you were an US company? You talk about "Congress" as if you were referring to your local legislative institution whereas you keep insisting on your Swiss and European roots. Changing the title to "US Congress is about..." would make more sense.

#Proton #Privacy #EU

fosstodon.org

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 7mo ago

Replying to

@novacustom@mastodon.online Very good decision. The only other viable option I see, besides the Fediverse given that you already have a presence in it via Mastodon, would be Eurosky: https://www.eurosky.tech/ Basically, you can access Bluesky and other AT-Protocol-based solutions, but with your data hosted in Europe (in the Netherlands as far as I know). I haven't tested yet, even though I received my invitation codes for myself and my company. Any feedback or thoughts are welcome.

eurosky.tech

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 12mo ago

Replying to

@Tutanota @protonprivacy And since we're talking about security and privacy, let's continue... #Security #Privacy #OpenSource #Transparency #ThreatModeling #Email #E2EE

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 10mo ago

Replying to

@iguana09863 @chatcontrol It's not that simple to bypass the Great Firewall of China (GFW): https://github.com/net4people/bbs/issues/22

GitHub

How China Detects and Blocks Shadowsocks · Issue #22 · net4people/bbs

How China Detects and Blocks Shadowsocks Authors: Anonymous, Anonymous, Anonymous, David Fifield, Amir Houmansadr Date: Sunday, December 29, 2019 中文版：Shadowsocks是如何被检测和封锁的 This report first appeare...

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 10mo ago

Replying to

@iguana09863 @chatcontrol It has never been in Signal's intentions to provide anonymity, but security and privacy. It's three different concepts. You cannot track a Signal user with their phone number, but you can know that a phone number is linked to a Signal account.

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 10mo ago

Replying to

@autonomysolidarity @iguana09863 @chatcontrol Indeed. Lumo, their new LLM/AI agent service is already hosted outside of Switzerland.

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 12mo ago

Replying to

@Tutanota @protonprivacy Besides, it's not the first time you attacked Proton while stating that you are "the world's most secure email". Do I have to remind you that you JUST released manual key verification whereas the issue was raised to you ~8 years ago? It means that until very recently, Tuta servers could easily MITM all the "post-quantum" end-to-end encrypted emails... https://github.com/tutao/tutanota/issues/768 Proton went beyond manual verifications years ago with a blockchain: https://proton.me/support/key-transparency

GitHub

Manual key verification · Issue #768 · tutao/tutanota

The client does not expose key verification to the user, all users of Tutanota must trust Tutanota to not provide forged keys and perform an MITM attack, this defeats the whole security model of Tu...

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 9mo ago

Replying to

@leanderlindahl@mastodon.social @_elena@mastodon.social @EUCommission@ec.social-network.europa.eu Done too. Thanks for the initiative.

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 28mo ago

Replying to

@Robertcw@mastodon.social @NosirrahSec@infosec.exchange @GossiTheDog@cyberplace.social Oh they do. You should see how great Windows games can run on GNU/Linux systems thanks to projects like Proton. It's the runtime environment used by the Steam Deck. Some games run even better with Proton than with a Windows system: https://mastodon.social/@gamingonlinux/112484756956318819

mastodon.social

GamingOnLinux 🐧🎮: "Valve Proton has made gaming close to solved too.…" - Mastodon

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 15mo ago

Replying to

@vincentcalame @Alivrouvert Je ne connaissais pas, merci !

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 26mo ago

Replying to

@hellenicsun@toot.community @petko@social.petko.me @organicmaps@fosstodon.org @fdroidorg@floss.social It can be downloaded via @accrescent@infosec.exchange too.

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 7mo ago

Replying to

@Tutanota@mastodon.social Where can we find the source code of the add-ons? On the add-ons' page (e.g. https://addons.thunderbird.net/en-GB/thunderbird/addon/tuta-mail) it is said they are GPLv3-licensed, but I cannot find any link to the source codes, and I didn't find them in your GitHub organisation neither.

addons.thunderbird.net

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 7mo ago

Replying to

@Tutanota@mastodon.social I know now why I didn't find it before asking you. You published it ~10 days later... https://github.com/tutao/tutanota/commit/3c0a73620d75b3fe3e91e33a2dbc0603303eeef3

GitHub

add tutamail and tutacalendar thunderbird add-ons v1.0.0 · tutao/tutanota@3c0a736

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices. - add tutamail and tutacalendar thunderbird add-ons v1.0.0 · tutao/tutanota@3c0a736

Skyper 💻🎧☕📖 @Skyper@fosstodon.org

· 7mo ago

Replying to

@ikuturso@mastodon.social @novacustom@mastodon.online Agreed, I'm aware of it, and that's why I only recommend Fediverse platforms around me. That's said, from a business perspective, to reach a broader audience, it doesn't seem to be a bad idea. It's a trade-off I think. But if you have counter-arguments, please share, I'm all ears.