bolha.us

0 posts0 participants0 posts today

Kevin Karhan :verified:<a href="https://wuffs.org/@Ninji" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Ninji</a> yeah, gotta use <code>enc</code> more...<a href="https://github.com/kkarhan/misc-scripts/blob/b4b66c465040fd1cb60ce69b41a92b2b6d41f98c/bash/.bash_aliases#L53" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/kkarhan/misc-scripts/blob/b4b66c465040fd1cb60ce69b41a92b2b6d41f98c/bash/.bash_aliases#L53</a><a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enc</a> <a href="https://infosec.space/tags/Encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Encryption</a> <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a>

Kevin Karhan :verified:<a href="https://udongein.xyz/users/lispi314" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@lispi314</a> <a href="https://mk.absturztau.be/@enigmatico" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@enigmatico</a> <a href="https://transfem.social/@bunnybeam" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bunnybeam</a> <a href="https://ublog.kimapr.net/users/kimapr" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@kimapr</a> nodds in agreement<ul><li>I think having a proper <a href="https://infosec.space/tags/API" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#API</a> is a way to facilitate that, cuz worst-case one just slaps together some <a href="https://infosec.space/tags/aliases" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aliases</a> in <a href="https://infosec.space/tags/bash" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bash</a>, <a href="https://infosec.space/tags/fish" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fish</a>, <a href="https://infosec.space/tags/zsh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zsh</a> or whatever <a href="https://infosec.space/tags/shell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shell</a> and just uses <a href="https://infosec.space/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> to query stuff manually as this solves the whole <a href="https://infosec.space/tags/WebApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebApp</a> - issue.</li></ul>And I do prefer <a href="https://infosec.space/tags/FLOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FLOSS</a> as it works fine for an ever increasing audience!<ul><li>Even if we choose to point at bad <a href="https://infosec.space/tags/UX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UX</a> / <a href="https://infosec.space/tags/UI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UI</a> combos like <a href="https://infosec.space/tags/GnuPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuPG</a>, we've to also acknowledge better existing alternatives like <a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enc</a> that <a href="https://github.com/life4/enc" rel="nofollow noopener noreferrer" target="_blank">just work</a>!</li></ul>Personally, I think that everything people are expected to use if not forced to use should be <a href="https://infosec.space/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> as licensed in a <a href="https://infosec.space/tags/OSI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSI</a> accredited license and be released with <a href="https://infosec.space/tags/SourceCode" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SourceCode</a> and <a href="https://infosec.space/tags/documentation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#documentation</a> to make <a href="https://infosec.space/tags/reproduceableBuilds" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#reproduceableBuilds</a> and thus facilitate <a href="https://infosec.space/tags/audits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#audits</a> by truly independent parties...<ul><li>And if that's not possible any requirement to using said things should be outlawed no matter the context! </li></ul>A unsarcastically good example is <a href="https://infosec.space/tags/S3" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#S3</a>, even tho I hate <a href="https://infosec.space/tags/amazon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#amazon</a>, they wanted <a href="https://infosec.space/tags/developers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#developers</a> to integrate their <a href="https://infosec.space/tags/ObjectStorage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ObjectStorage</a> which necessitated an <a href="https://infosec.space/tags/open" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#open</a> source'd API to the point that it's <a href="https://infosec.space/tags/backend" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#backend</a> is inherently reproduceable, and now every halfassing <a href="https://infosec.space/tags/Webhoster" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Webhoster</a> offers S3 <a href="https://infosec.space/tags/storage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#storage</a>, sometimes with bit & second-precise billing.

Kevin Karhan :verified:<a href="https://infosec.exchange/@xoron" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@xoron</a> I don't want to discourage you at all - in fact I think your goal is not just noble but also worth aspiring to.<ul><li>My recommendation is always to scout out existing solutions, protocols and standards and see if those can be salvaged / used and if not, reason why. <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a>/MIME may seem crusty but a good UI can make it easy. Same.goes for <a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OMEMO</a> & <a href="https://infosec.space/tags/OTR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTR</a>... </li></ul>But whatever you do, please "DO NOT DIY ENCRYPTION!" <ul><li>Instead delegate it to drop-in libraries (i.e. crypto++ for C++) that are well, maintained and getting audited.</li></ul>Prioritize features early on and make a decision what you want and if/how these can be accomplished. If necessary, have different modes / functions one has to context-switch (i.e. videocalling can't work in an airgapped network unless your callers are in the same (W)LAN).<ul><li>If possible choose to stay platform-independent in terms of tech, so like <a href="https://infosec.space/tags/WebCall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebCall</a>, <a href="https://infosec.space/tags/JitsiMeet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JitsiMeet</a>, etc. you can simply package that up with <a href="https://nwjs.io" rel="nofollow noopener noreferrer" target="_blank">nw.js</a>... (Except if you need like a minimalist, (n)curses-style TUI tool like <a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enc</a>)</li></ul>User-test early on. Espechally with "<a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechIlliterates</a>", if you can.<ul><li>Focus on a <a href="https://infosec.space/tags/MVP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MVP</a> (minimum viable product) early on. </li></ul>Write <a href="https://infosec.space/tags/documentation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#documentation</a> early on since that'll remove headaches. And I don't just mean <a href="https://infosec.space/tags/CommentYourCode" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CommentYourCode</a> but go deep and explain in detail why you chose something. This will help not just you.<ul><li>In terms of "scouting existing solutions" I'd recommend to take a look not just at <a href="https://infosec.space/tags/JitsiMeet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JitsiMeet</a> & <a href="https://infosec.space/tags/WebCall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebCall</a>, but also <a href="https://infosec.space/tags/Briar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Briar</a>, <a href="https://infosec.space/tags/ServalMesh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ServalMesh</a>, <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#monoclesChat</a>, <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@gajim</a> / <a href="https://infosec.space/tags/gajim" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gajim</a> and <a href="https://infosec.exchange/@micahflee" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@micahflee</a>'s <a href="https://infosec.space/tags/OnionShare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OnionShare</a>. </li></ul>Make yourself a list what you like and dislike from those. <ul><li>Same with <a href="https://infosec.space/tags/Linphone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linphone</a>, <a href="https://fosstodon.org/@zulip" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@zulip</a> / <a href="https://infosec.space/tags/Zulip" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Zulip</a>, <a href="https://infosec.space/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a>, <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a>, <a href="https://infosec.space/tags/Threema" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Threema</a> and even <a href="https://infosec.space/tags/WeChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WeChat</a>, <a href="https://infosec.space/tags/FacebookMessenger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FacebookMessenger</a>, <a href="https://infosec.space/tags/iMessage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iMessage</a>, <a href="https://infosec.space/tags/FaceTime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FaceTime</a> and god forbid <a href="https://infosec.space/tags/Skype" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Skype</a>, <a href="https://infosec.space/tags/MicrosoftTeams" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MicrosoftTeams</a> as well as <a href="https://infosec.space/tags/Slack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Slack</a>.</li></ul>Don't be afraid if your <a href="https://infosec.space/tags/App" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#App</a> can't tick all the boxes at first release. Rather feel free to slowly ibtegrate them. Needless to say I do sincerely wish you good luck and only the best in terms of success.

Kevin Karhan :verified:<a href="https://infosec.exchange/@xoron" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@xoron</a> I mean, that's close to <a href="https://infosec.space/tags/ServalMesh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ServalMesh</a>, tho Id say if you were willinc to compromise then <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OMEMO</a> as in <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@gajim</a> / <a href="https://infosec.space/tags/Gajim" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gajim</a> & <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#monoclesChat</a> gets most of it.<ul><li>Personally, I did habe a similar idea, abeit more bare-bones, with <a href="https://github.com/KBtechnologies/PocketCrypto" rel="nofollow noopener noreferrer" target="_blank">the</a> <a href="https://infosec.space/tags/PocketCrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PocketCrypto</a>.</li></ul>For file transfers, I did <a href="https://github.com/KBtechnologies/ATP" rel="nofollow noopener noreferrer" target="_blank">envision</a> <a href="https://infosec.space/tags/ATP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ATP</a> aka. <a href="https://infosec.space/tags/AirrgappedTransferProtocol" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AirrgappedTransferProtocol</a>.<ul><li>Both are <a href="https://infosec.space/tags/NetworkAgnostic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkAgnostic</a>, <a href="https://infosec.space/tags/Decentralized" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Decentralized</a> and full <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfCustody</a> with real <a href="https://infosec.space/tags/E2EE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#E2EE</a> using <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> (or <a href="https://github.com/life4/enc" rel="nofollow noopener noreferrer" target="_blank">rather</a> <a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enc</a>)!</li></ul>

Kevin Karhan :verified:<a href="https://wonkodon.com/@admin" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@admin</a> <a href="https://m.ai6yr.org/@ai6yr" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ai6yr</a> <a href="https://bitbang.social/@profoundlynerdy" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@profoundlynerdy</a> whatever works best for you...<ul><li>That's the nice thing about <code>.bash_aliases</code> as <a href="https://bash.cyberciti.biz/guide/%7E/.bash_aliases" rel="nofollow noopener noreferrer" target="_blank">showcased</a> by <a href="https://mastodon.social/@nixCraft" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@nixCraft</a> ...</li></ul>For example, I use <a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enc</a> <a href="https://github.com/life4/enc" rel="nofollow noopener noreferrer" target="_blank">for cryptographic functions</a> and <a href="https://github.com/kkarhan/misc-scripts/blob/2999339de4df13457f3a43cbb13beba9e55268ba/bash/.bash_aliases#L50" rel="nofollow noopener noreferrer" target="_blank">thus have setup some aliases for that as well</a>...

Recent searches

Search options

Administered by:

Server stats:

#enc