Spyke

It’s almost as if they never actually cared about the server but rather were just using it to score points. Not at all like, you know, absolutely everything else.

206
technocritreply
lemmy.dbzer0.com

It's almost like libs don't actually care about this recent leak but are also just using it to score points.

The lack of self-awareness is stunning.

-64
Haessreply
lemmynsfw.com

Ah, I knew there was a good reason I have you tagged as 'fucking moron'

38

Well damn, I was looking for a method to do it on PC lol.

1
ripcordreply
lemmy.world

Just block them.

At Bluesky it's been astoundingly effective for getting the fucking morons to find somewhere else to waste their time.

5

I disagree with blocking them. Call them out on it once and then don't engage with any further responses

1

People do care about the leaaks, but also how ironically this situation is compared to the 'but what about her emails' situation in the past.

14
BearGunreply
ttrpg.network

imagine getting banned from c/noncredibledefense, how pathetic do you have to be for that to happen

4

I laughed way too hard at this. Its only been a month or two since I switched to Lemmy and already I'm getting the injokes.

4

Nothing on Hillary Clinton's server was classified at the time it was put on the server

From the group of 30,000 e-mails returned to the State Department, 110 e-mails in 52 e-mail chains have been determined by the owning agency to contain classified information at the time they were sent or received. Eight of those chains contained information that was Top Secret at the time they were sent; 36 chains contained Secret information at the time; and eight contained Confidential information, which is the lowest level of classification.

Some items were subsequently reclassified to the lowest level above Unclassified.

Separate from those, about 2,000 additional e-mails were “up-classified” to make them Confidential; the information in those had not been classified at the time the e-mails were sent.

So there's really no comparison between the two situations.

I agree. I just wanted to correct the record and to highlight that a normal government employee would have been fired for what Hillary did.

4

In my opinion the most relevant commonality is the hypocrisy of all the involved parties. Hillary had sent out a notice to the entire State Department saying to only use official communication platforms, and then did the opposite as if she thinks she's above the rules.

Then these Republicans who condemned the actions also used a non-official platform.

2
ZK686reply
lemmy.world

Here we go with the "Democrats can do no wrong..." speech...

-41
Cryophiliareply
lemmy.world

Blocking them doesn't silence them, it's just plugging your own ears. Call them out instead.

3

They want the attention. I have no interest in giving it to them.

1
Soulgreply
ani.social

Please explain how you can read "that one thing everyone was mad at wasn't as bad as they said" to "they're perfect angels who never do anything bad" without being either braindead or a pathetic partisan hack

8

Ah but you see it's a very logical and reasonable conclusion. Allow me to explain.

ahem

DEMOCRATS BAD

1

Any government business should be conducted solely on government equipment, classified or unclassified. What the poster is saying is that the two don't compare, what Hillary did was conduct government business on a private server, what the trump administration officials did was share sensitive compartmented information (SCI) on a private app.

Both actions were wrong, it's just that revealing SCI information is far far worse.

6
piefed.social

Wasn't the server an actual private server she had setup whereas this is a corporate app that is supposedly private if they are not lying and accessing the data. I mean this is way wore unless they put up a server to run the chat software.

36
piefed.social

I don't think anything can be proven unless you have admin rights to the server at all times. signals are encrypted every time they are sent encrypted. can it be turned off with a flag? does it run in dev without it for troubleshooting and if so is it impossible to enable in prod.

8

exactly. if they had self hosted then it would be closer to equivalent to hilaries email but if it was using signal as written but then there is the foia issue which was still possible with hilarys email server, but not under a self hosted signal if not altered.

5
GreyBeardreply
lemmy.one

The server can't decrypt it if it doesn't have the keys to do so. It can be proven that private keys never leave the local device. It can also be proven that the proper public keys are being provided, and that the local device alerts on public key changes with a partner are announced.

Of course, nobody as part of the linked article did any of that verification, but still, a server doesn't need to be trusted to be functional.

2
piefed.social

I think we are more talking about can the server decrypt the data. Not that the data is encrypted.

1
GreyBeardreply
lemmy.one

In the case of signal, it is provable that it cannot. They do not hold the keys to decrypt. The closest risk is the server injecting a new public key into the conversation, which the Signal app will warn about.

2
piefed.social

Yeah I just don't get this. How does a person added to a chat get keys then?

1

Signal does hold the public keys for every user. But having the public key doesn't let you decrypt anything. You need the private key to decrypt data encrypted with the public key. So in a chat example, if you and I exchange public keys, I can encrypt the message using your public key, but only you can decrypt it, using your private key.

Signal does run the key exchange, which means they could hand a user the wrong public key, a public key which they have the private key for, instead of the other person's. That is a threat model for this type of communications, however, signal users can see the key thumbprints of their fellow chat participants and verify them manually. And once a chat has begun, any changes to that key alerts all parties in the chat so they know a change has happened. The new key wont have access to any previous or pending messages, only new ones after the change took place.

2
lemm.ee

Doesn't matter. Signal desktop app can sync messages and be installed on compromised computers. One of the guys in the chat was in Russia visiting Putin. It would be trivial to sync the account to the app installed on compromised machines and basically become an invisible backdoor into every secure communication for that user. I have no doubt one of the users in the chat is setup like this.

1

Oh, I'm not defending these dumb-asses doing illegal things to avoid systems setup to safeguard American and its people. They absolutely could have synced things to compromised devices. Just that Signal, themselves, couldn't do that.

1
lemmy.world

Also, while using the app, there is zero accountability for who told who to do what within the government. FOIA is useless for any conversation happening within that app, self hosted or not.

19

Yep, OPSEC is definitely a major issue here. But the other problem is like you mention, zero accountability. Additionally, if they delete the chat, there is no way to reobtain the data for historical archive purposes, which is another law violation.

15
lemmy.world

It doesn’t matter what kind of server you’re using. Highly classified information has rules and regulations. Some stuff can only be talked about in certain buildings because the buildings were built to block listening devices.

This is a major fuck up that could have gotten American soldiers killed. Everyone involved should be in prison.

14
lemmy.world

Everyone involved should be in prison.

I'm not sure we could prove this was knowing and willful. The Russian recipient of the messages is the most suspicious angle of attack.

1
Arckareply
midwest.social

Are you suggesting they didn't know Signal wasn't an approved platform for sensitive government communication and willfully used it anyway?

2

Is approval of a communications platform legally required, or just best practice? You can guess what the Republicans will argue.

Hillary got off for not knowingly leaking documents, so will these guys.

1
lemmy.world

I hope you saw the transcripts of the messages today. Do you want to retract your statement?

1
lemmy.world

The first message may have been by mistake. Every single message after that was knowing and willful. This isn’t a message between friends. These were highly classified communications between top admin officials. They are aware of the law and policies regarding classified information and willfully engaged in communications on an unsecured platform. Any person could have stopped it after the first message.

1

The law requires people to knowingly and willfully release confidential information.

Just using unsecured platforms for communications is not illegal (otherwise Hillary would have been prosecuted).

1

Conservative hypocrisy knows no bounds. They will only be outraged at what their talking heads tell them to be outraged at.

34

Kind of like "If I didn't have bad luck, I'd have no luck at all!"

2
lemm.ee

I'm not sure that pointing out the hypocrisy is even useful. I'm nearing 40 and "but it's okay when we do it" has always been a core tenant of conservatism. They don't give a shit that they're hypocrites, they don't care, I've boxed them in on it before and it always just boils down to "it's okay for us because I said so". I think it's maybe more useful to move past the identification of hypocrisy and start engaging in conversations about accountability. That is, conversations about hypocrisy without conversations about what kind of accountability you'd like to see are moot. So, let's move past "can you believe this shit? But her emails? Do you feel like the hypocrites you are yet?" to "your boy did something fucking stupid. I don't care about your excuses, fire him."

24

That's true! We just assume that by pointing out the naughty behavior Someone will Do Something because honest people expect honest reactions.

Dishonest people cannot have honest reactions, their words mean nothing, they respond only to personal suffering and nothing else.

8
lemm.ee

Where is the accountability from the public? Every redneck 100 mi from me was screaming about her damn emails. They probably didn't even understand why they were outraged, but the man on the FoX nEwS was angry about it so I am too. They say that the don't trust the government for legitimate topics like vaccines, and taxes and then when the government gives you a huge reason to actually be concerned, it gets ignored

23

It's almost like that party has no values and sees everything only through the lens of political leverage.

17
lemmy.world

Also the disappearing texts are a concern. There's not much mention of that. And now you have to wonder, how many other conversations have been held there, and with who?

15
whoisearthreply
lemmy.ca

Similar to WhatsApp you can set limits on how long to keep a message

2
reddthat.com

Yeah the main point of using signal to get around the presidential records act, which is very illegal

13

According to Sun Tzus art of war, someone who is that stupid should be put to death.

4
lemmy.ca

Shared military plans with a journalist on a private app.

12

Clown show ... so let's spin it that this came from a disreputable journalist.

4

It’s always Opposite Day with these clowns GOP. The blame finger is always pointing at them.

12
reddthat.com

The takeaway is that Signal is a bloody good app to use.

11
sik0fewlreply
lemmy.ca

Sounds like it's pretty easy to add the wrong people to your chat.

11
lemmy.ca

It's no different from many other chat apps. Select the contacts you want in the group.

There's no issue with the app, it's actually among the most secure. The issue is the meatbag behind the thumbs selecting who to put in the chat.

6

I've never had any issues by adding the wrong people to a group, personally 🙂.

2
lemm.ee

I'm so tired of America letting the worst pieces of shit get away with anything. One side breaks the speed limit by 2mph and they're euthanized. The other side rapes and kills all of Asia, and nothing happens.

11
Coreidanreply
lemmy.world

The two sides you’re talking about is the rich vs the poor.

The rich get to do what they want because no one holds them accountable. The people that should be holding them accountable are corrupted by the endless money that the rich have.

The “people” could change this over night but the rich have us all divided.

If you want real change stop hating your neighbor and start banding together. That will never happen tho because the rich are winning this war.

0
Cryophiliareply
lemmy.world

Are you seriously trying to convince us that these fucking Nazis are our allies? If I were in a room with Bill Gates and a dirt poor Nazi and had a gun with one bullet, I'd shoot the Nazi.

No class solidarity with bigots. They do not get a seat at the table.

0
Coreidanreply
lemmy.world

Are you seriously trying to tell me that these Nazis didn’t come about BECAUSE of rich people?

If so I’ve got a bridge to sell you.

1
Cryophiliareply
lemmy.world

Don't care. No solidarity with Nazis. No making friends, no compromise, no collaberating. Ever.

1
lemmy.world

EDIT: To be 1000% clear, they should not be using personal cell phones for this, which they probably did because everyone in this admin is braindead gutter trash. I'm suggesting that self-hosted Signal over government servers is probably fine for security with potentially some tweaks to the app. Something I neglected to think of however is that this sidesteps record keeping, and probably deliberately so. My contention here was solely about security, but this fact makes Signal use unconscionable in my book because it impedes accountability.


Okay, let's just be clear here: Signal isn't just another "private app"; the amount of information they have about your communications is zero (0) with the exception that I believe they can see if you have an account and the last time you connected to the server. Governments absolutely do rely on Signal. The Signal protocol is open and highly robust, the app code is FOSS and has eyes from a shitload of security researchers globally due to its importance, its server code is FOSS (although you don't have to trust this due to the robust E2EE, and you can even self-host IIRC due to the FOSS server code), and it has reproducible builds.

This fuck-up was strictly due to the fact that they're incompetent morons just randomly inviting people to group chats and shit with no guardrails. If I had to guess, they'd probably want to self-host the fork the Signal app and make it so that you can only invite people with some form of clearance, but this last thing is total speculation on my part. I'm sure there's some way to sanely do this. The part about Signal being secure is just objectively true; it's audited like absolute crazy, both the FOSS app and the protocol. I would trust it more than whatever the US government could homebrew, even.

If you, as a citizen, are looking for secure, private messaging, Signal should be at the very top of your list of possible candidates alongside Matrix, SimpleX, and Session (keep in mind that Element and Session do not yet support forward secrecy, although the Matrix protocol does).

11
darkdemizereply
sh.itjust.works

Let's also be clear: Signal, regardless of their encryption standards, is not an approved system for any kind of classified information. Leaks of this nature have the potential to cost people's lives. Every single person in that group chat would have known this. Many of them have original classification authority.

Further, not only was the platform not approved for the information, the messages were set to disappear after some time. This is a violation of government record keeping laws and FOIA standards. This wasn't an oopsie.

50

I mean we put a fox news anchor in charge, and if he's even half as dumb as he looks, well that's pretty fucking dumb. I doubt he understands, or if he does, doesn't care. Just shameful. But hey, at least the libs are getting owned.

3

The mere fact it was possible to invite a random journalist to the chat is ridiculous. That shouldn't be an option in a secure environment.

2
fake_meowsreply
lemm.ee

This fuck-up was strictly due to the fact that they're incompetent morons just randomly inviting people to group chats and shit with no guardrails.

No.

These fuckwits were handling classified and top secret information in the open on their cell phones.

It doesn't matter what specific app they used. This is not about the technology. You missed the point.

35
lemmy.world

There's been a few articles recently about Session authors starting with Signal protocol, and then continuing without clear understanding what they do, thus that Session shouldn't be used.

Matrix is a compromise, it's not as much about security as it is about just modern FOSS chat.

3
lemmy.world

Matrix is a compromise, it's not as much about security as it is about just modern FOSS chat.

Pray tell. Granted again that Element doesn't yet support forward secrecy, but describe what you see as specifically wrong with Matrix, please.

1
lemmy.world

but describe what you see as specifically wrong with Matrix, please.

Federated with huge load on servers. I'd prefer something like old Skype with auth servers part interacting via activitypub or something like that.

1
lemmy.world

Do you see anything wrong with it security-wise? The wording of your previous comment has me confused where you fall on this.

1

Just that I haven't heard of it being as praised as Signal, and since it appears to be intended for chat rooms more than for privacy, there's natural suspicion that something is missed there.

1

I would trust it more than whatever the US government could homebrew, even.

The clowns in this administration, sure. But the NSA knows what they're doing when it comes to cryptography.

1

And here several days later they are still trying to gaslight everyone into believing that it never happened.

7

I don’t run a magazine so I couldn’t report it but I was included on a top secret Signal group chat where administration officials talked about how long you should wait after Trump or Elon absolutely explodes a White House bathroom. A friend at OSHA accidentally added me.

The younger staffers were given a map of nearby Starbucks locations because sometimes, it would take hours for the West Wing loos to be re-certified as a safe workplace environment. And if the inspector forgot his Geiger counter, forget it. Bathrooms were off limits that day.

-4
4amreply

The app is likely secure.

The personal phones they installed this app on, however…

7

It's almost like both "parties" only care about decent OpSec when the other team fucks up.

And neither party cares about the endless imperial slaughter that these communications facilitate. Not even worth mentioning.

-11
lemmy.world

They accidentally added a random guy to a Signal group. Not quite the same as classified documents on a self-hosted email server. I've heard US military uses Signal quite officially.

This should, of course, raise concerns that if they like Signal - they might want to self-host it, the client and the server are FOSS. They might even consider paying Signal the company to help them.

-14
lemmy.world

OK, humans err. And also make mistakes, like being so confident on something they don't know for sure.

If it's specifically disallowed, then some people should be locked up.

-2
legion02reply
lemmy.world

Like all the people on that signal group chat that work for the government?

4

JJJJJJJJJJJJJJJJJJJJJJJJJJJJJAAAAAAAAAAAAAAAAAAAAAAAAAIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIILLLLLLLLLLLLLLLLLLLLLLLLLLLLL

1
lemmy.world

It's almost like excusing neoliberals for breaking the law just normalizes republicans doing it...

And they're a lot stupider, so when they do it there's more likely to be negative consequences.

The solution is higher standards and holding someone responsible even when they have the right letter by their name.

Letting neoliberals be as shitty as they want hasn't been working out for 30 years since they tried to convince us a president lying about sexually taking advantage of interns in the oval office and then lying about it under oath to Congress was a "nothingburger" to use their own vernacular.

All lowering Dem standards does, is make us look like hypocrites. And that depresses turnout, which lets fascists into office.

-18

I'm all for accountability and yes there should have been repercussions for Hilary Clinton for using a private email server but in 2016 Republicans used the emails as a cudgel to keep scoring points and drag out investigation after investigation and hearing after hearing to keep the buttery males in the news cycle and keep constant attention on smearing her and making her seem like the incompetent evil mastermind behind benghazi and the pizza parlor and the adrenochrome.

We go high. They go low. And when they go low, they win elections.

7
lemmy.world

a president lying about sexually taking advantage of interns in the oval office

I think the intern was willing and the problem was with lies.

Anyway, sometimes you have to release the steam even in the oval office.

Clinton is an unpleasant person (being best buddies with the current president before the latter's brain rot due to neurosyphilis became irreversible, for example), but why the hell fscking someone there is a bigger deal than, for example, just ordering murders overseas or legally starting this whole mass surveillance thing?

-2
lemmy.world

I think the intern

Was an intern...

And he was the fucking president.

Think of a scenario where anyone in management at a company can have "sexual relations" with an intern in their office and it can be described as "willing".

Now, despite what Biden spent four years saying, understand that a US president is more powerful and has more of an effect on their interns careers and lives than some random CEO.

For fucks sake, it's 2025, do you really understand how the implict and explicit power dynamic prevented consent at least during working hours.

You think she did what she did with a guy 3 times her age because he was charismatic? It's because he was the president.

Just....

I feel like I'm rambling but there's so many obvious ways this was problematic, and you're still just fucking ok with it?

but why the hell fscking someone there is a bigger deal than, for example, just ordering murders overseas or legally starting this whole mass surveillance thing?

That was never the big deal, it was wrong and fucked up...

But the big deal was Bill lying under oath to Congress about it, and Dem politicians and voters closed ranks and said it didn't matter.

The coverup, not the crime.

That was the beginning of the end of the two party system. Only one party had any integrity and we gave it away to protect Bill Clinton and neoliberalism.

I guess this was all 30 years ago, and a lot of people weren't old enough to remember it happening, but it was also too recent to be in history books yet.

There's not really an excuse to not learn about it now, political literacy literally saves lives. We need more informed voters.

-2

The important thing is that in this trying time, you have managed to remind us to only ever criticize Democrats. Thank you, comrade.

1

You think she did what she did with a guy 3 times her age because he was charismatic? It’s because he was the president.

Generally you would be right, but it seems Clinton really did have the kind of charisma to attract women almost unnaturally, long before he became the guy 3 times her age and a president.

I feel like I’m rambling but there’s so many obvious ways this was problematic, and you’re still just fucking ok with it?

No, just everything is relative, and some bad things are solved at the expense of other bad things.

But the big deal was Bill lying under oath to Congress about it, and Dem politicians and voters closed ranks and said it didn’t matter.

That's what I said.

There’s not really an excuse to not learn about it now, political literacy literally saves lives. We need more informed voters.

LOL, I live in a country where most of the populace doesn't understand what was wrong with mass repressions. They think some bad rich people were the majority of victims, and not typical Ukrainian and Siberian farmers. And of course they don't understand that the government is not the property of its employees and politicians in power.

You have a long way to fall to reach that. But all those idiots were sufficiently informed. They chose to believe something worse.

-1
jjjalljsreply
ttrpg.network

This is a deeply off topic whataboutism that only serves to distract from how horrible the trump administration is. You are benefitting the conservatives.

-1
lemmy.world

It is dead center on topic....

Neoliberals violating rules, regulations, and laws just normalizes it. And then it's harder to hold Republicans accountable

I'm saying:

We need to hold everyone to a higher standard

Because if the only standard is letter by your name, fascists win elections.

If we run a dem candidate who meets the standards of Dem voters, we get a good president.

The more you condone lower the bar for Dems, the less votes Dems get

Haven't you noticed yet?

-2