@harmonia_amanda
– #Orbot, pour l'utilisation de Tor.
– #HashDroid, pour créer et vérifier des sommes de contrôle.
– #TableTop, pour convertir des nombres, décoder des messages, lancer des dés, etc.
– #Conversations, pour clavarder (mais ça permet d'autres choses, comme le partage de fichiers, la visio…).
– Bon, après, #OrganicMaps et #StreetComplete ont déjà été mentionnées, alors je vais m'arrêter là…

#WhatsMissing is an #Android-#ROM that is the equivalent of @tails_live / @tails / #Tails, which includes @torproject / #Tor and @guardianproject / #Orbot support form the get-go and forces everything through Tor if not only allows to connect to #OnionSedvices using #orWall...

• Because that would have a similar audience and really complement peoples' needs.

Ideally make it like an #image file to put on a #RaspberryPi #CM5 / #CM4 / #Pi400 / #Pi500 / #Pi4 / #Pi5 to work with a bunch of #WWAN modules for #data, #SMS & #calling (needed with some SIMs to get shit done)...

Issues aside it's now 15 years since I started using #Tor / @torproject & @guardianproject / #Orbot on #Android full-time.

• Not just for #privacy, but because it acts as a #PerformanceProxy on #throttled #German mobile networks!

Because in #EDGEland they yeet users to 64kBit/s if not even lower to 16kBit/s past paid bandwith and instead of properly renegotiating the bandwith, they trottle connections by reducing the packet rate / dropping packets, making it as #laggy as a #GSO-based #SATCOM connection!

• On top of that, almost all #MNO|s & #MVNO|s illegally use RFC1918 Address space, *espechally 10.0.0.0/8 for #CGNAT, thus bricking #VPN|s and sadly @BNetzA doesn't really give a damn!

Also friendly reminder for #developers of #Apps using @torproject / #Tor and/or accessing #OnionServices using @guardianproject / #Orbot:

• Set #DNS to localhost:5400 unless you want it to #leak the use of Tor.

You may trust @mullvadnet but even they can't resolve …onion (and likely wouldn't even if it was that simple) because that's how it works!

@craige @jwz @claudius @mathowie I've played with #SimpleX chat before. I don't know if it's ready for primetime yet, but I'd definitely keep an eye on it. As it stands, I'd love to recommend #Signal #SignalMessenger, because I think it has better UX (and less metadata via sealed sender) than #Matrix with its #Element client. But Matrix does not require phone numbers. So, my current recommendation to anybody organizing vulnerable people is to use Matrix rather than Signal, and to ensure that users run it over #tor via the #orbot app.

@jwildeboer Additional recommendations for hardening your #Signal #SignalMessenger application:

* Also install #Orbot, and have all Signal traffic routed through it.
* Configure Orbot to *not* use reduced padding.
* Configure Orbot to use different routes for all hosts, ports, and clients.
* Configure the Orbot VPN to be always-on (Android VPN settings).
* Configure Signal to allow sealed sender from anybody.
* Configure Signal to require PIN for re-registration.
* Configure Signal's chat defaults to erase after a certain period of time.

Signal is a big juicy target with tons of metadata about who is talking to who going over the wire at any given time. The contents of the communication are encrypted, but the metadata is not. And remember: "we kill people based on metadata" (https://abcnews.go.com/blogs/headlines/2014/05/ex-nsa-chief-we-kill-people-based-on-metadata). If the fascists are willing to kill people based off of metadata, then they're certainly willing to surveil, harass, arrest, and imprison people based off of metadata.

These hardening efforts make building up a social graph from metadata more difficult. Unfortunately, you have to do it yourself, as Signal has made it clear on multiple occasions that it does not view network-layer anonymity as within its scope:

>Signal instantly dismissed my report, saying it wasn't their responsibility and it was up to users to hide their identity: "Signal has never attempted to fully replicate the set of network-layer anonymity features that projects like Wireguard, Tor, and other open-source VPN software can provide".
>
>https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117

@signalapp @torproject

@ploum

And as you are able to, run your own #Tor server!

You can do this easily, just install #Orbot on an Android device, or tor on a Linux laptop, and enable "relay" mode.

This will not be an exit node, so there is no danger for you.

For phones, you can buy an ethernet+charging dongle like this here, to get better speeds and stability and keep your wifi unoccupied:

https://www.amazon.de/gp/aw/d/B0CNKH5GSG

You can also run #i2p with the #i2pd Android app.

Both via #Obtainium:

https://apps.obtainium.imranr.dev

@ActuallyAubrey That depends on the juristiction in question, the plan & provider in question as well as used hardware in question.

• In case of even remotely suspected #Stalkerware I do recommend to get personally-owned, controlled, secured and hidden hardware to enable unsurveiled comms.

Consider telephony & SMS inherently & unfixably insecure.

• If in doubt get a new Android with an anonymous prepaid SIM that has affordable data options and use @torproject / #TorBrowser and #Orbot with #TorBridges on ports 80 & 443 which use #meek & #webtunnel transports, so any surveiling party will only see non-suspicious HTTPS traffic.

OFC a maliciously configured CPE/Router can log & report all pachets that travel through, but #DNS & #HTTP or any unencrypted comms are susceptible.

@delta TBH, I think that #deltaChat, alongside @monocles / #monoclesChat is one of the few real #E2EE #Chat & #Messaging solutions (which allow for full #SelfCustody of keys as well as being based on #OpenStandards for a #MultiVendor & #MultiProvider ecosystem) and even out-of-band verification and key exchange...

• The main difference is that deltaChat implements #PGP/MIME on #IMAP+#SMTP, which may be easier to setup in some cases and also offer an easy pipeline to archival requirements in #business setups whilst #monocles chat uses #XMPP+#OMEMO first and supports PGP/MIME as a secondary option, making it a good option in individual setups...

Needless to say both support using @torproject / #Tor via #Orbot and thus connecting to an #OnionService or just anonymously connecting to the server one personally chooses...

• So unless a provider explicitly bans Tor proactively, they'll work just fine.

The advantage of XMPP is that it also allows for calls, whereas I've to see how one can do Group Chats on deltaChat at all...

Given the violent suppression of the protests in Kenya #RejectFinanceBill2024, you can use #TorBrowser and #Orbot (for mobile devices) to connect securely and bypass online censorship. Tor is with you. Stay safe and stay connected. https://play.google.com/store/search?q=orbot&c=apps&hl=us
https://play.google.com/store/search?q=tor+browser&c=apps&hl=us