olivier falcoz

corporate intelligence | privacy advocate | sport addict | south-east asia

[olivierfalcoz]

GitHub - sskras/comm-setup: How to set up reasonably secure communications with friends and family

How to set up reasonably secure communications with friends and family - GitHub - sskras/comm-setup: How to set up reasonably secure communications with friends and family

Privacy apps I use: the baseline.

[olivierfalcoz]

A bit late to the party. Still accurate though.

[olivierfalcoz]

Disregarding user choice. Disregarding user privacy. Microsoft should come clean with its user community.

[olivierfalcoz]

Terms Of Service - tl;dr

“I have read and agree to the Terms” is the biggest lie on the web. Fix that https://tosdr.org/

[olivierfalcoz]

Here is the takeaway. Where the Chinese state steps in is where entrepreneurship goes to die.

[olivierfalcoz]

No email that you’ve ever written is ever deleted. There’s always a copy out there. So you should always use that common sense approach: If this is something that’s groundbreaking for my company or it could change the world, should I send that in an email? Probably not - Stephen Ward

[olivierfalcoz]

What’s In The Metadata via @grugq

There are major problems with using any mobile phone based secure messenger (including Signal). Using a phone is a security risk. Mobile phones are extremely loud metadata spewing fountains vomiting forth a trail of your life’s activities. This is a short list of all of the identifiers that mobile phones expose, most of them passively:

Location

Specific location (home, place of work, etc.)

Mobility pattern (from home, via commuter route, to work) — very unique, just 4 locations is enough to identify 90% of people.

Paired mobility pattern with a known device (known as “mirroring”, when two or more devices travel together; including car telemetry!)

Network

Numbers dialed (who you call)

Calls received (who calls you)

Calling pattern (numbers dialed, for how long, how frequently)

Physical

IMEI (mobile phone device ID)

IMSI (mobile phone telco subscriber ID)

Content

Identifiers, e.g. names, locations

Voice fingerprinting

Keywords

Keep reading on @thegrugq

[olivierfalcoz]

Russia now collecting encryption keys to decode information from Facebook, WhatsApp and Telegram

Announcement made by Federal Security Service.

Russia's Federal Security Service (FSB) has announced it now has the capability to collect encryption keys that would give it the back door into popular internet services such as Facebook, Gmail, WhatsApp and Telegram in order to spy on users' conversations.

[olivierfalcoz]

WhatsApp Forensic Artifacts: Chats Aren’t Being Deleted

Sorry, folks, while experts are saying the encryption checks out in WhatsApp, it looks like the latest version of the app tested leaves forensic trace of all of your chats, even after you’ve deleted, cleared, or archived them… even if you “Clear All Chats”. In fact, the only way to get rid of them appears to be to delete the app entirely.

Keep reading on Zdziarski's Blog of Things

[olivierfalcoz]

Control Your Data: Five Simple Steps

To take more control over your data.

CHANGE YOUR DEFAULT SETTINGS: FIREFOX, CHROME, TWITTER (AND OTHERS) Default settings are often set to 'share as much as possible', but luckily this can usually be changed. How-to's for Firefox, Chrome, and Twitter are below. Instagram, Facebook and LinkedIn are coming soon!

INSTALL ADD-ONS/EXTENSIONS TO BLOCK TRACKERS Take ten minutes to add a few tracker-blocking extensions to your browser. They are easy to install and will make your website visits a lot more private.

USE ALTERNATIVE TOOLS: EMAIL, CHAT, SEARCH, DOCS, MAPS, AND OTHERS The only way to really keep your data out of corporate hands is to use alternative, free and open source tools instead. Luckily there's an excellent selection out there!

EVALUATE YOUR TOOLS Key questions to ask about the tools and services you're using now, and about those you're thinking about using.

IMPLEMENT SOME PRIVACY AND SECURITY BASICS Make these five things a habit.

[olivierfalcoz]

European Data Protection Supervisor gives crypto-hawks a thumb in the eye

[olivierfalcoz]

The Illusion Of Choice via @VisualCap

[olivierfalcoz]

During the last year hell seems to have frozen over: corporate overlords neighbours at Apple, Google and Facebook have all pushed for crypto in one way or another. For Facebook (WhatsApp) and Google (Allo) the messenger crypto has even been implemented by none less than the famous, endorsed-by-Edward-Snowden anarchist and hacker Moxie Marlinspike! So all is well on the privacy front! … but is it really?

[olivierfalcoz]

1MDB: transparent, clean, honest

[olivierfalcoz]

On dit "chiffrer" et pas "crypter", bordel! 

Heu... mais pourquoi...?

Réponse ici: https://chiffrer.info/

[olivierfalcoz]

Perhaps the hasty coup attempt in Turkey last week was doomed to fail. The leaders setting up a WhatsApp group to coordinate a major takeover was a sure indication of their unpreparedness.

[olivierfalcoz]

Malaysia: Clear and present danger from the Islamic State