214
Russia-aligned hackers are targeting Signal users with device-linking QR codes (arstechnica.com)
submitted 1 year ago by to c/technology@lemmy.world
12 comments fedilink hide all child comments
 

Swapping QR codes in group invites and artillery targeting are latest ploys.

you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 1 year ago (2 children)

Back to pen and paper it is! Start feeding the pigeons, everyone!

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 14 points 1 year ago (1 child)

    Obligatory link to IPoAC

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 1 year ago (4 children)

    Message in a bottle is the way to go.

    If hackers don’t know where the bottle is floating, they can’t read the message. It’s also completely disconnected from the Internet, further enhancing the already robust security. This protocol also supports all encryption methods you can fit inside the bottle. There’s no central authority, no servers, no licenses, and no EULAs to accept without reading.

    The only bottlenecks are bandwidth, packet loss, and the physical dimensions of the glass container.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 3 points 1 year ago* (last edited 1 year ago)

    For the landlocked, may I recommend the Dead Drop Protocol? Leave the message in a place that everyone knows about, but only the intended recipients knows a message is there to be read. Like the Message in a Bottle, it supports all encryption methods and is disconnected from the Internet.

    There are a couple drawbacks, though. For one, unless you are watching the drop point, you have no way of knowing whether your message made it to the intended recipient or if it was intercepted. Vice versa, if you are the intended recipient of a dropped message, the only guarantee you have that the message is authentic is if the message uses a self-authenticating encryption method. Also, there is a potential that any drop point you use may be under surveillance, so make sure to not use the same drop point too often.

  • permalink
  • fedilink
  • source
  • parent