Guardian Project @guardianproject@librem.one

So there is a lack of accessibility to folks in the #GlobalSouth in particular. These Motorolas cost around half of what the budget versions of Pixel phones cost and are sold in many countries in continents where Pixels are not, including in #SouthAmerica #Asia and #MENA

Thank you to #StartSmall and jack dorsey for believing in us, and for the funding that made this possible ! And a BIG thank you to our friends at @LineageOS for their work on platform support for the Motorola phones

Huge announcement ! @calyxos is now available for the Motorola G32, G42 and G52 ! Why is this a big deal ? Because it helps us further our mission of making #PrivacyByDesign available to the maximum amount of people around the world as we can..

Google Pixel phones are the default and easiest phones to support while maintaining the #Android security model with a locked boot loader and full verified boot. But they are only sold in around a dozen countries around the world...

EFF's latest report shows that many of the internet's ills have one thing in common: they're based on the business model of widespread corporate surveillance online. https://www.eff.org/deeplinks/2023/11/address-online-harms-we-must-first-do-privacy

Oh, and lastly, this whole Mastodon thread as a much more convenient blog post 😜:

https://www.netmeister.org/blog/https-rrs.html

#dns #svcb #https #rfc9460 ✌️

I just started a thread on Hacker News about Encrypted Client Hello (ECH):
https://news.ycombinator.com/item?id=38066009

Feel free to comment either here or there.

#ECH #DoH #Firefox #Mozilla #Chrome #Chromium

I hacked some ECH (encrypted client hello) support in the JDK network stack the other day (in TLS 1.3).
https://github.com/johanvos/jdk/tree/ech2

#java #ECH #openjdk

Hey, so #RFC9460 HTTPS/SVCB records are neat, right?

They...
- speed up your time-to-first-packet (by basically stuffing the Alt-Svc HTTP header / ALPN TLS extension into the #DNS);
- let you do redirection on the zone apex without using CNAMEs;
- allow for simple DNS load distribution and failover;
- obviate HSTS and the cumbersone preloading process;
- enable stronger privacy protections via Encrypted Client Hello aka #ECH

Mozilla is ringing the alarm bell on a dangerous EU regulation.

https://last-chance-for-eidas.org

Willkommen bei #ORFodon!

Der @ORF_News Bot hat jetzt seine eigene Instanz und eine Menge neuer Funktionen. Die Sparten und Bundesländernachrichten haben jetzt ihre eigenen Konten und dementsprechend ist eine viel flexiblere Filterung der Nachrichten und Beiträge des #ORF möglich.

Um Mehrfachbeiträge zu vermeiden, boosten die Kanäle einander.

Der Dienst wird weiterhin inoffiziell und privat betrieben.

Viel Spaß!

Weitere Informationen:
https://orfodon.org/about

#Mastodon #Fediverse #News

austrian public broadcaster is on the fediverse, in case you are into monitoring int'l news: https://orfodon.org/@ORFodon/111375092254666650

For example, the biggest #mobile #malware incident that I know about remains #XCodeGhost https://en.wikipedia.org/wiki/XcodeGhost, which got into over 4000 apps, which all passed #Apple's review and were shipped by the Apple App Store. All told, those apps were installed 128 million times. Another measure is #NSOGroup #Pegasus which seems to have maintained zero click access to #Android and #iOS for years. That is spread by exploiting messenger apps, not by #AppStore or "sideloading" 3/

Google and Apple provide data about the malware they catch in their app store review processes. Both of them talk about "sideloading" as a security risk. Notably, neither Apple nor Google provide data on how much malware comes from outside of their app stores. Nor do they provide data-based analysis of which is the bigger threat: malware that makes it into their app stores or from other channels. They have this data, they track installs and active apps plus there is #PlayProtect #XProtect etc 2/