Crypto communications and OPSEC thread - Tox edition

There is the irony: Posting on this site probably counts as affiliating with terrorists at this point. Flimsy, but totally not beyond those who might want to ruin you.

Debian, like any Linux distro is only "secure" if you know what you're doing I imagine. For example, everytime I install Linux I break it.
But you're on TOR, you should know this.

Only use Ugandan software and you're golden.

I like Riot and Tox, but as far as I'm aware there's no Zig Forums groups on Riot.

No one cares you colossal vagina. Run away if you're scared.

afaik, ubuntu is only compromised in the "FOSS" sense, not any other. Ubuntu got in big shit for having its installer default to "reporting errors" and such, which caused a big stink. My understanding is that they discontinued this practice. What this user says is essentially correct, with a few possible exceptions. Some complain that systemdick is a real problem. Most debian-based distros still use it, thought iirc its falling out of favor, or at least being used for less and less services (the main thing was that it was one attack vector that allowed access to too much of the system, not that it was necessarily insecure). Further, using a number of non-debian distros might present the advantage of "security through obscurity" since their file structures, etc might be different and therefore an attack vector or virus might not work bc its written for the most common distribution(s) ie. debian-based distros. Linux itself benefits from this (since most viruses are written for winblows).

Still, in hacking competitions, winblows always gets hacked first, followed (these days by only a few seconds) by OSXlgbtqia, while linux is far, far behind in the amount of time it takes to hack.

but, again, this user is essentially correct in that it is most about the skill of the user and the precautions you take. best thing to do is find a linux distro and stick with it until you learn it in and out. Find a "hardening guide" and follow it. Learn iptables (you can start with ufw if you want) and how to use it. And, most of all, protect your browser and be careful what you click on! (>protip: only run browsers from non-admin accounts, preferably sandboxed with firejail or such)

Mint is fine, but I wouldn't use it for very sensitive material. Trisquel and other GNU distros are much better.

Nibbas, I can't even make a gmail without the dogs wanting my mobile number. I've been trying all day now to get around it but can't. I even paid for a service that was unable to get around it, i think because all the numbers in their pool were already used. can anyone help me with this? I'm an Ausfag too by the way in case it's necessary information.

forgot to bracket the (((gmail)))

Have made a gmail in the last month with only a different email box. Using a VPN terminating in the US. You might want to try that, AUS seems to falling to darkness pretty quick, Google might have to be complying with local regs. Good idea to make sure nothing your browser is sending has a hint it isn't a US browser as well. (Plenty of websites to break down what your browser is revealing.) Should only need to worry about all that crap long enough to make the account.

I'll give it a try but I think they may have changed there policy since the vox fiasco. i set one up about a month ago too and didn't need the phone activation then either. it's fucking starting to get insane. won't be long until our online identity is given out at birth to go hand in hand with your real identity and all anonymity is removed from the internet. big brother is coming boys.