FBI's ability to legally access secure messaging app content and metadata [pdf]

Post by upofadown » Tue, Nov 30, 2021, 11:09 PM UTC

leokennis wrote: post #65

nimbius wrote: post #38

Earlier quoted context omitted.

for signal users this means the messages of course do exist on your phone, which will be the first thing these agencies seek to abscond with once youre detained as its infinitely more crackable in their hands. as a casual reminder: The fifth amendment protects your speech, not your biometrics. do not use face or fingerprint to secure your phone. use a strong passphrase, and if in doubt, power down the phone (android)…

My advice if you’re not on the level where three letter agencies are actively interested in your comings and goings: - Use a strong pass phrase - Enable biometrics so you don’t need to type that pass phrase 100 times per day - Learn the shortcut to have your phone disable biometrics and require the pass phrase so you can use it when police is coming for you, you’re entering the immigration line in the airport etc. -…

Post by Andrew_nenakhov » Tue, Nov 30, 2021, 11:15 PM UTC

pgalvin wrote: post #155

skrowl wrote: post #86

Earlier quoted context omitted.

Source for Telegram storing the information unencrypted at rest?

It is widely known and confirmed by Telegram themselves that your messages are encrypted at rest by keys they possess. This is a similar process to what Dropbox, iCloud, Google Drive, and Facebook Messenger do. Your files with cloud services aren’t stored unencrypted on a hard drive - they’re encrypted, with the keys kept somewhere else by the cloud provider. This way somebody can’t walk out with a rack and access us…

Post by oceanplexian » Tue, Nov 30, 2021, 11:18 PM UTC

emn13 wrote: post #128

ribosometronome wrote: post #109

Earlier quoted context omitted.

To err on the side of caution, it's best to make all your passcodes themselves an admission to a crime.

They don't actually need your passphrase to unlock your phone - they just need somebody with the passphrase to unlock in for them. And if there's any doubt about who that is, then having that passphrase counts as testimonial; but if there's not - it might not count as testimonial. Although there are apparently a whole bunch of legal details that matter here; courts have in some cases held that defendants can be force…

Post by kingcharles » Tue, Nov 30, 2021, 11:20 PM UTC

authed wrote: post #175

xanaxagoras wrote: post #43

They left off one very popular messenger, SMS: * Message content: All * Subpoena: can render all message content for the last 1-7 years * 18 U.S.C 2703(d): can render all message content for the last 1-7 years * Search warrant: can render all message content for the last 1-7 years * Vague suspicion plus a small fee to the carrier: can render all message content for the last 1-7 years

You forgot email... and they don't need a warrant for messages older then 180 days if in the cloud (they never delete them, too): https://www.consumerreports.org/consumerist/house-passes-bil...

Post by xster » Tue, Nov 30, 2021, 11:23 PM UTC

adamfisk wrote: post #177

xster wrote: post #162

This seems like a good place to say that I strongly recommend Yasha Levine's Surveillance Valley book ( https://www.goodreads.com/book/show/34220713-surveillance-va... ) where he suggests that all of this is working as intended, going all the way back to the military counter-insurgency roots of the arpanet first in places like Vietnam, and then back home in anti-war and leftist movements. The contemporary themes that…

Yasha Levine is a conspiracy theorist hack. There’s really no other way to say it. His narrative is attractive to a left leaning audience with shallow knowledge in this area, but the reality is that without publicly funded software like Tor, Signal, OTF, and my own Lantern, our world would be more fully saturated with corporate control of the internet. We need more public funding for open source software (with public…