I DID IT!!! just fucking installed lineage os <3 never imagined that it could be so complicated... they really don't want you to flash your phone man. I guess the main problem was that my phone is old x)

So I'm trying to get a clean and free environment, any advice about applications? My biggest problem is with telegram, I'll try wire, bit there is anything else that can replace telegram and on android and Linux? I mean I need to keep conversations sync, and I won't use a Chrome application TT so no signal.

@linuxxx <3

@Celes Just wondering, why no Chrome application? If it's because Chrome isn't good with privacy, you also have Chromium which works with about every Chrome store application :). Except for that, you could try Riot (it includes end to end crypto if you turn it on) but that's an electron application. There is no app right now that keeps everything in sync without using something like Chromium/Chrome or electron :/. Yeah you have Wire but I don't think they're good on metadata. I actually sent them an email about that, haven't read it yet so let me check!

If you'd like any more tips/recommendation in relation to privacy/security, mention me again! :)

@linuxxx honestly, just because I'm on gentoo and Firefox is far more optimisable there. So I end up using Firefox, never thought about using both because they are probably the huggest build in my collection x)
Well maybe one day I'll build one (but right now I still have a lot of important projects :( ) do you think it's crazy hard?

I'll try riot and wire for the moment I guess, I used telegram so much that won't make a huge difference anyway ^^

@Celes Do I think what is crazy hard? :). And yeah fair enough haha, let me know if you have any more questions or need some help!

@linuxxx I'll keep your username in mind don't worry. Not really hard with your activity here xD
Hard to develop a messenger cross platform with small Metadata and good encryption ^^

@Celes Well, the company behind Signal, Open Whisper Systems, has open sourced its code for a long time now so if you take their JS library (of the Signal crypto protocol) then you could write a fairly good/secure messenger I'd say! And also, that crypto is seen as one of the most secure ones in the world so yeah :D

@linuxxx there are quite a few native Matrix clients if I recall... So you can use a native one on desktop and Riot on the phone

@epse True but do they all provide the (in riot buildin) end to end Signal based crypto? That's my main concern :)

Yep that's part of the Matrix spec and protocol. Riot is just default or "example" client

@epse this is starting to interest me :o

Riot as a option to send encrypted message only to verified devices, I'm not sure why I should turn it on

@linuxxx you can remove the shared contact option from wire. Is that enough?

@Celes I am not sure what it is, could you elaborate further by any chance?

@linuxxx first option that I just deactivate

@Celes Yeah might be a good idea to deactivate indeed. Not sure how it stores the contacts though hmmm...

@dfox I can't edit the image, is that normal?

@Celes I'd like to test it out again. If you'd like to start a little convo, hit me up and I'll give you my username :)

@linuxxx or I can just give you mine ^^ celes_eternal

@Celes Fair enough xD

@Celes The request you just got is from me :P

@Celes Oh and also, take a look at keybase.io!

@Celes I had it too for a while its awesome. The only problem was that my battery life decreased. So I switched again.

@GodHatesMe I'll probably end up with an alternative to Google play (that exists right?) but for now x)

Christ, i kniw what you mean - properly getting custom recoveries and stuff is a pain for older hardware. I tried finding a non-otterx rom for my kindle fire 1st gen. still haven't.

@ParkCity I wish you luck :/

What's the issue with Telegram?

@bottswana well just a privacy problem mainly. But honestly matrix project is really cool, so I'm no longer annoyed to leave telegram

@Celes I'm curious what the privacy issues are with Telegram though. I haven't heard of an issue?

@bottswana https://security.stackexchange.com/...
https://reddit.com/r/...

Thanks @linuxxx and the 'privacy team' of devrant (don't know everyone xp)

@bottswana Their crypto is incredibly broken: (the author is the creator of the Signal crypto protocol, one of the most secure ones in the world)
https://moxie.org/blog/...

@linuxxx yeah, I saw. Interesting stuff. No actual implementation of an attack though, just massive ignorance in crypto standards.

@bottswana True, no implementation of an attack but security researchers from Zimperium have showed that it's very possible to extract plaintext messages from a phone (telegram messages obviously).
Next to that, search for the Telegram metadata flaws on search engines :)

@linuxxx I presume that's the non 'secure chat' style messages. I'm aware of the metadata stuff. It's fairly interesting stuff. Still, rolling their own crypto. Why? Just use signals open source protocol??

@bottswana Yeah exactly! There's a freaking strong crypto algorythm called the Signal (or Double Rathet) on the market which is even fucking open so just why!
Metadata story: (with a PoC or at least one that used to work well)
https://gizmodo.com.au/2016/06/...

@linuxxx I'll have a read. Thanks for the info, and chat! Haha :)

@bottswana Welcome! And also let me know if you'd have any more questions, I'd be happy to (try) answer them :)

@linuxxx should chat Linux sometime linuxxx. I was a systems engineer before I moved into software dev xD and will do.

@bottswana What do you mean exactly? :p

@linuxxx topics I find interesting. Linux, servers, networking and security. That's what I kind of meant.
I think we spammed this rant a little

@bottswana If you're into linux/security/foss/privacy then you'd be welcome to join a group chat we have where those things are the main topic!

I moved from lineage os to paranoid android. Also the Telegram alternative I use is Wire.