Yes. And the only person I know to have interacted with state security agencies in professional area has told me a few times that any security system based on cryptography is of no real use. Like perpetuum mobile, snake oil, and so on.
If your information is protected by cryptography, it could as well be protected by using “Aesopean language” or memorized by loyal courier or put on paper note in a secret place. You have a secret and a message, ultimately. If your secret place can be predicted, then your secret key can be stolen. If your loyal courier can be drugged\tortured\intimidated, so can be you or your addressee or your cryptography means’ providers to give up the secret key or the message contents or to sabotage your tools.
“Aesopean language” is how they really do it for anything important, it’s pretty naturally learned from culture (one case where spy movies and such show it right), it doesn’t require niche expertise, and it does require common context that can’t be fully reconstructed in most cases.
Unfortunately I’m autistic and impaired in that exact part of human communication, but honestly some of famous people whose jobs involve being enlightened black belt masters of that are autistic, so perhaps I’m just dumb.
herseycokguzelolacak@lemmy.ml 4 months ago
This is why I don’t subscribe to the Signal E2EE hype cult.
The fact that Signal doesn’t hide the anonymity of its users, and forces everyone to use phone numbers is a huge red flag.
jjlinux@lemmy.zip 4 months ago
SimpleX is the way to go, always making sure you never say anything that can point to you in any chat.
iknowitwheniseeit@lemmynsfw.com 4 months ago
Yeah, they caught the Dread Pirate Roberts because he leaked some account name, IIRC. There is no such thing as perfect opsec. 😬
HulkSmashBurgers@reddthat.com 4 months ago
Jami is an option also.
jami.net
jjlinux@lemmy.zip 4 months ago
Yeah, but different use cases.