GuardianPlasma

On iOS it literally notifies you instantly when there's a system update rather than waiting longer due to staged rollouts. On Android it scans installed apps for known malicious APK hashes. I think you can also send DNS requests through it via VPN service. Not that useful at all and can be achieved for free via other means (Google Play has Play Protect so it does the same thing), definitely not fighting off Pegasus spyware.

2024-09-19 03:07:45

- reply

It's simply not possible with the way Android and iOS apps work (app sandbox). The author of that article is complaining about the fact that Apple/Google don't give security software special access (so they can't sell their scam as easily). The real attack surface comes from highly privleged EDR software like CrowdStrike (and iVerify if they gkt the access they wanted), not mobile phones.

2024-09-19 01:09:14

This is hilarious to read, they're claimimg to have detected Pegasus spyware via a mobile app 🤣 https://iverify.io/blog/why-i-joined-iverify

2024-09-18 21:16:02

- reply

Trail of Bits lost credibility since iVerify: https://xcancel.com/GrapheneOS/status/1828651999300124796
https://www.trailofbits.com/products/

2024-09-18 15:05:19

- reply

Switch to the simplex.apk (64 bit) GitHub release and keep it updated via Obtainium: https://github.com/ImranR98/Obtainium
If you were using f-droid.org release then you'll need to export database and uninstall the app first as they have different signing key, if you were using app.simplex.chat repo then it's the same and the GitHub release will install over it.

2024-09-17 15:43:30

- reply

Signal is end-to-end encrypted by default, Telegram only has optional secret chats for 1:1 chats. They can access most of the messages.

2024-09-17 15:42:29

- reply

Unplugged are scammers: https://x.com/GrapheneOS/status/1808161048194671006

2024-09-17 14:41:55

- reply

Carrier-based calls/texts that lack end-to-end encryption is at the wrong end of the spectrum.

2024-09-17 13:24:42

- reply

There's no secure messaging

2024-09-17 13:23:27

- reply

The goal is still to reduce trust in servers, and SimpleX does that better than any other private messaging network, but having anonymous node operators doesn't improve privacy, as they've got no incentive not to store the user data they can access.
You should use Tor if you require transport layer security, but that's not a solution for everyone.

2024-09-17 04:39:25

- reply

A direct P2P connection over the internet is not private, as both ISPs can see who you're connecting to. P2P over an overlay network like Tor or I2P is better, but still not perfect: https://discuss.privacyguides.net/t/simplex-vs-cwtch-who-is-right/19256/8
I think many of those same points apply to I2P?

2024-09-17 03:24:48

- reply

Nostr and SimpleX can coexist. One as a publishing, or "social media" network, the other as the most private and secure communication network.

2024-09-17 03:20:34

- reply

I completely agree, this is what I meant, I probably shouldn't write stuff when I'm tired. I don't think Nostr private messaging and SimpleX can coexist without users' safety being harmed. The ones who already are aware go out of their way to avoid Nostr DMs, and a lot even put links in their Nostr profiles. This means the only people who are using Nostr DMs are people who don't understand the lack of privacy and security, which is very dangerous.

2024-09-17 03:08:27

- reply

If you're talking about the Session messahing app, then not really.
https://x.com/SimpleXChat/status/1754455524068720762
https://x.com/SimpleXChat/status/1802432603150311442
Encryption security was downgraded based on incrorrect statements, transport layer uses their own onion routing network that requires node operators to invest ~$1000 in a cryptocurrency.
You're better off using SimpleX over Tor.

2024-09-17 02:58:07

- reply

Sadly a lot of the developers see it as competition rather than something that can coexist. I believe it would be beneficial for both platforms too. User safety is being put at risk with the current system.

2024-09-17 02:49:49

- reply

https://x.com/SimpleXChat/status/1835393532250530132

2024-09-17 02:26:18

- reply

The developer has said they think SimpleX is more private, but I think Nostr clients in general need to add some big text with warning symbols and sirens to warn about the insecurity of DMs. Also, this should be added: https://github.com/retrnull/garnet/issues/8 ⚠️🚨