#endtoendencryption — Public Fediverse posts

Kollaborative Dokumente: Konzept für Ende-zu-Ende-Verschlüssung über #Signal | heise online https://www.heise.de/news/Kollaborative-Dokumente-Konzept-fuer-Ende-zu-Ende-Verschluessung-ueber-Signal-11417492.html #SignalApp @signalapp #collaboration #Verschlüsselung #encryption #Datenschutz #privacy #EPFL @epfl @maxplanckgesellschaft #MPI #EndToEndEncryption #E2EE #End2EndEncryption

"As our regular readers know, Signal is working on a way to register an account without a phone number. New hints reveal that this optional alternative registration method for Signal will require a one-time payment."

https://aboutsignal.com/news/signal-login-registration-without-a-phone-number/

#signal #signalapp #privacy #security #endtoendencryption #FOSS #opensource

WhatsApp's new Scam Alert feature uses on-device machine learning to detect potential scam messages from unknown contacts, enhancing user security while preserving privacy.

#WhatsApp #ScamAlert #CyberSecurity #MachineLearning #Privacy #EndToEndEncryption

https://thedailytechfeed.com/whatsapp-introduces-scam-alert-feature-to-combat-social-engineering-attacks/

Apple Defeats Liability for Not Scanning iCloud for CSAM, But the Judge Was Not Pleased-Amy v. Apple | Eric Goldman

The opinion downplays the encryption angle; it mentions encryption only twice, as if it’s an afterthought. However, encryption is the critical attribute underlying Apple’s moves. Forcing Apple to scan for CSAM in iCloud means breaking end-to-end encryption for everyone and all purposes, including: malefactors who would intercept private files for criminal purposes; and government actors who have repeatedly shown that they will break into, distribute, and weaponize privately stored file caches (I was just thinking about the North Korea Sony hack. Remember it?).

https://blog.ericgoldman.org/archives/2026/07/apple-defeats-liability-for-not-scanning-icloud-for-csam-but-the-judge-was-not-pleased-amy-v-apple.htm

The Double-Edged Sword of Digital Freedom: The Risks of Infinito.Nexus with Native Tor Support

⚠️ Disclaimer

This article was generated entirely by artificial intelligence without editorial review.

To publish this analysis quickly, I deliberately chose to release it without manual editing or fact-checking. The purpose of this article is not to provide a polished technical specification, but to stimulate discussion about the societal, ethical, and security implications of the next generation of Infinito.Nexus with native Tor support.

Some technical assumptions, predictions, or conclusions may therefore be incomplete, inaccurate, or open to debate. They should be understood as informed analysis rather than verified fact.

The scenarios described in this article are intended to illustrate both the opportunities and the risks of increasingly accessible privacy-preserving infrastructure. They do not advocate, encourage, or endorse illegal activity. The same technologies that can strengthen digital sovereignty, protect journalists, human rights organizations, researchers, and political opposition operating under censorship can also be misused by malicious actors.

The goal of this article is to encourage an open discussion about the consequences of making powerful decentralized infrastructure available to a much broader audience. As with encryption, Linux, Git, peer-to-peer networks, and the Internet itself, technological progress creates both new freedoms and new responsibilities.

Please read this article critically, verify important claims independently, and view it as a starting point for discussion rather than a definitive statement on the future of decentralized infrastructure.

Technology is neutral.

Whether it empowers democratic resistance or enables organized crime depends on the people using it.

With native Tor integration, Infinito.Nexus has the potential to fundamentally change how self-hosted infrastructure is deployed. It could become possible for anyone to create a completely private digital ecosystem with only minimal technical knowledge.

That prospect is both exciting — and concerning.

A World Beyond Traditional Surveillance

Today’s Internet relies heavily on centralized infrastructure.

Governments can subpoena cloud providers.

Internet Service Providers can monitor traffic.

Hosting companies know where servers are located.

DNS providers can suspend domains.

Payment providers can freeze accounts.

Social media platforms can remove communities.

Tor changes that equation.

By integrating Tor directly into the infrastructure layer instead of treating it as an optional add-on, organizations could operate entirely within Onion Services.

No public IP addresses.

No public DNS.

No visible server locations.

No conventional attack surface.

Infrastructure that was previously easy to discover suddenly becomes practically invisible to anyone outside the Tor network.

From Old Smartphones to Invisible Infrastructure

Perhaps the most disruptive consequence of native Tor support is that almost anyone could become an anonymous infrastructure operator.

Instead of renting a VPS or purchasing expensive server hardware, users could simply take an old smartphone, install a Linux distribution such as Droidian, deploy Infinito.Nexus, and immediately have a functional server reachable exclusively through Tor.

Modern smartphones already contain everything traditionally required for a small server:

• multicore ARM processors
• flash storage
• Wi-Fi and LTE connectivity
• extremely low power consumption
• integrated batteries acting as an Uninterruptible Power Supply (UPS)

Unlike conventional servers, smartphones can continue operating during short power outages without requiring any additional hardware.

Because all communication occurs through Onion Services, the physical location of the device becomes significantly harder to determine than traditionally hosted infrastructure.

A server could operate from:

• an apartment
• an office
• a vehicle
• a backpack
• a cabin
• virtually anywhere with Internet access

Instead of racks in a datacenter, entire organizations could operate from inexpensive commodity hardware.

Infrastructure that once required thousands of dollars could eventually fit inside a jacket pocket.

Organization Beyond Censorship

Perhaps the most transformative consequence of native Tor support is not anonymity itself — it is organization.

Modern democratic movements require far more than encrypted messaging. They need complete digital infrastructure.

Imagine a group deploying the following services exclusively as Onion Services:

• Matrix for encrypted communication
• Nextcloud for document sharing
• OpenProject for task management
• Git for software development
• Wiki systems for documentation
• forums for public discussion
• video conferencing
• identity management with single sign-on

Every service is accessible only through Tor.

There are no public IP addresses.

There are no publicly reachable domains.

There is no central cloud provider that can simply terminate the infrastructure.

For political opposition movements operating under authoritarian governments, this could fundamentally change what is possible.

In countries such as Russia or Iran, governments have repeatedly attempted to restrict independent media, block communication platforms, and pressure hosting providers into taking services offline. A decentralized infrastructure based on Tor Onion Services makes these traditional forms of censorship considerably more difficult.

If one server disappears, another can be brought online using the same deployment automation and cryptographic identities.

Instead of relying on a single datacenter, an organization could distribute its infrastructure across many independently operated devices, including repurposed smartphones running Linux distributions such as Droidian. Every device becomes part of the organization’s digital backbone while remaining reachable only through the Tor network.

This significantly lowers the barrier to building resilient communication networks for journalists, NGOs, researchers, humanitarian organizations, and democratic opposition movements.

Building Invisible Organizations

Imagine an organization deploying:

• Identity Management
• Matrix
• Nextcloud
• Git
• Email
• Video Conferencing
• Project Management
• Forums
• Social Networks
• AI Infrastructure

Every service exists exclusively as an Onion Service.

Employees connect only through Tor.

No public domains.

No public IP addresses.

No externally visible services.

From the perspective of the public Internet, the organization barely exists.

A Powerful Tool for Democracy

For many people around the world, this would be an extraordinary step toward digital sovereignty.

Political opposition operating under authoritarian governments often faces:

• Internet censorship
• mass surveillance
• infrastructure seizures
• domain confiscation
• ISP monitoring
• targeted cyber attacks

A hidden smartphone consuming only a few watts of electricity could host secure communications for an activist movement.

Journalists could publish anonymously.

NGOs could coordinate without relying on commercial cloud providers.

Entire communities could communicate through infrastructure that is extremely difficult to discover or disable.

History repeatedly demonstrates that secure communication is one of the foundations of democratic resistance.

The Other Side of the Coin

Unfortunately, technology does not distinguish between good and bad actors.

The exact same infrastructure could also be deployed by:

• organized cybercrime
• ransomware groups
• illegal marketplaces
• extremist organizations
• terrorist networks
• large-scale fraud operations
• illegal trafficking

If deploying anonymous infrastructure becomes as simple as flashing Linux onto an old smartphone and clicking through an installation wizard, the barrier to entry changes dramatically.

What once required experienced Linux administrators could eventually become accessible to almost anyone.

A hidden smartphone server could host:

• a secure school collaboration platform

or

• an anonymous criminal marketplace.

Technically, there may be little difference.

The software cannot distinguish between them.

Risks for Democratic Societies

For democratic societies such as Germany, this presents a difficult challenge.

Security agencies often rely on information obtained from hosting providers, cloud operators, domain registries, DNS providers, or centralized communication platforms during investigations.

Infrastructure that exists exclusively as Tor Onion Services reduces the availability of these traditional investigative paths.

This can make investigations more difficult and more resource-intensive, especially when organizations are technically competent and operate their own infrastructure.

A terrorist cell, extremist group, or organized criminal network could theoretically operate:

• private Matrix servers
• encrypted file storage
• internal forums
• planning boards
• identity systems
• software repositories
• anonymous web services

all without relying on public-facing infrastructure.

That does not mean such groups become impossible to detect.

Tor does not make people invisible.

Law enforcement can still use endpoint forensics, undercover operations, financial investigations, human intelligence, surveillance of physical logistics, and mistakes made by suspects.

But the balance changes.

The stronger privacy technologies become, the harder traditional bulk surveillance and provider-based investigations become.

This is exactly why the same tools that protect dissidents in authoritarian states can also create serious challenges for law enforcement in democratic states.

The Democratization of Anonymous Infrastructure

Historically, operating Onion Services required substantial expertise.

Administrators needed to understand:

• Linux
• networking
• reverse proxies
• DNS
• Tor
• certificates
• firewalls
• application integration

Automation changes everything.

Eventually, the entire deployment process could become:

1. Install Droidian on an old smartphone.
2. Install Infinito.Nexus.
3. Select the desired applications.
4. Enable Tor support.
5. Click Deploy.

Minutes later, an entire private infrastructure could be online.

No cloud provider.

No VPS.

No static IP.

No public DNS.

Infrastructure that previously required experienced system administrators becomes accessible to ordinary users.

That democratization is both empowering and dangerous.

Open Source Has Always Faced This Dilemma

This is not a new ethical problem.

Encryption protects:

• journalists
• dissidents
• criminals

VPNs protect:

• activists
• ransomware operators

Git is used to build:

• medical software
• malware

Linux powers:

• hospitals
• botnets

Artificial Intelligence can:

• accelerate scientific discovery
• generate phishing campaigns

Technology itself has no morality.

People do.

Infinito.Nexus Is Infrastructure

Infinito.Nexus is not being developed to create hidden criminal networks.

Its purpose is to simplify the deployment of sovereign, self-hosted infrastructure.

Native Tor support simply extends that philosophy.

The software itself does not decide who uses it.

The responsibility remains with those who deploy it.

The Ethical Challenge

Should powerful privacy technologies be withheld because they could be abused?

Or should society accept that technologies capable of protecting freedom will inevitably also be exploited by malicious actors?

There is no perfect answer.

Throughout history, almost every revolutionary communication technology — from the printing press to encrypted messaging — has been used for both constructive and destructive purposes.

Tor is no different.

Neither is Infinito.Nexus.

Technical Design

Native Tor support is currently being designed as a core networking feature of Infinito.Nexus.

Instead of treating Tor as an optional add-on, every deployed application can automatically receive its own Onion Service while remaining fully integrated into the deployment framework.

The current design proposal is publicly available:

Native Tor Support Requirements
https://github.com/kevinveenbirkenbach/infinito-nexus-core/blob/feature/svc-net-tor/docs/requirements/031-svc-net-tor-onion.md

Related projects:

Infinito.Nexus Core
https://github.com/kevinveenbirkenbach/infinito-nexus-core

Hetzner Arch LUKS
https://github.com/kevinveenbirkenbach/hetzner-arch-luks

Linux Image Manager
https://github.com/kevinveenbirkenbach/linux-image-manager

These projects together lay the groundwork for a future where deploying fully encrypted, self-hosted, Tor-native infrastructure becomes almost as simple as installing a mobile app.

Conclusion

Native Tor support has the potential to fundamentally reshape how self-hosted infrastructure is deployed.

For the first time, individuals, NGOs, journalists, companies, and political opposition movements could build private digital ecosystems with remarkably little technical expertise.

At the same time, the same technology could lower the barrier for anonymous criminal infrastructure.

A discarded smartphone running Linux could become a resilient, battery-backed server hidden almost anywhere.

That reality is both inspiring and unsettling.

Like encryption, Linux, Git, VPNs, and the Internet itself, Infinito.Nexus is infrastructure.

Infrastructure does not decide how it is used.

People do.

The challenge for society is therefore not whether such technology should exist, but how we choose to live in a world where powerful privacy tools become accessible to everyone.

The sheer amount of intentionality and thought that went into designing @ente's local ML processing is so heartwarming. It represents the best of what CS can be --- thoughtfully designing software to empower people ♥️

https://ente.com/ml

#Ente #SelfHosting #EndToEndEncryption #Privacy #EthicalSoftware

Meta has announced that WhatsApp will be introducing usernames to keep your phone numbers private. I was on @bbcradiowales this morning chatting to Catrin Heledd and Chris Wathan about how this will work and why it's a good idea.

Listen here from 01:43:00 onwards 🎧:
http://bbc.co.uk/sounds/play/m002y7s0

Key things to note:

📌 The tech for this is not new, it's already been on privacy-focused communication apps Telegram and Signal for years.

📌 WhatsApp's internal servers will know who you are and your phone number is associated with your smartphone, but outwardly your username will need to be typed in exactly in order to contact you.

📌 You could choose to have a username that matches your other social media profiles, but then that definitely poses a risk in random people contacting you, such as unwanted admirers if you're an Instagram / TikTok influencer.

📌 There are huge amounts of scams that perpetuate using WhatsApp today, from "dad I lost my phone can you send me money to pay this bill?" to romance scams, fake job scams and phishing attempts to get your 6-digit OTC authentication pin so scammers can take over your WhatsApp account and impersonate you to scam your contacts.

📌 If the under-16s social media ban goes ahead, there is concern that young people who make friends online in other countries will be forced to use WhatsApp to message their friends and risk giving their phone numbers to random strangers, so this could be a solution to that problem.

📌It's a good move but as far as I'm concerned, it's like closing the paddock gate once the horses, the cows, the sheep and the pigs have all run out and are miles away.

#WhatsApp #endtoendencryption #cybersecurity #scams #technology #technews

WhatsApp's "End-to-End Encryption" Is the Biggest Lie in Tech History

https://medium.com/%400xaxgb/whatsapps-e2e-encryption-is-the-biggest-lie-in-tech-history-and-i-can-prove-it-mathematically-46ebdffeb319

#HackerNews #WhatsApp #EndToEndEncryption #TechLies #PrivacyConcerns #Cybersecurity

Privacy isn't just about where your notes are stored - it's about who can access them. With Joplin's End-to-End Encryption, your notes remain protected from unauthorized access, giving you full control over your data.

#Joplin #EndToEndEncryption #DigitalPrivacy #OpenSource

Kent iemand #Fileverse? Het doet heel open en 'sourverein' aan.

Tegelijkertijd kan ik niet echt vinden wie er achter zit, hun github zegt: "This organization has no public members. You must be a member to see who’s a part of this organization. "

En vervolgens zitten ze alleen op X en niet op de Fediverse, terwijl hun naam een sterke link heeft daarmee.

https://fileverse.io/

#durftevragen #encryption #endToEndEncryption

Signal Warns UK Plan to Scan Devices for Nude Images Threatens Global Surveillance

Signal is sounding the alarm on the UK's plan to scan devices for nude images, warning that it threatens global surveillance and undermines the trust that underpins private communications. The encrypted messaging platform is urging caution, saying the proposed mechanism is not only ineffective in…

https://osintsights.com/signal-warns-uk-plan-to-scan-devices-for-nude-images-threatens-global-surveillan?utm_source=mastodon&utm_medium=social

#EndtoendEncryption #Surveillance #UkGovernment #GlobalSurveillance #EmergingThreats

#Picomemo 1.2.0 has been released ( #CLang / #CLanguage / #OMEMO / #XMPP / #Jabber / #E2EE / #EndToEndEncryption / #SecureCommunication ) https://github.com/mierenhoop/picomemo

🔐 WhatsApp non legge i tuoi messaggi? Vero…

La crittografia end-to-end protegge le chat in transito ✅ ma i metadati (chi contatti, quando, da dove) sono in chiaro. E il backup su iCloud/Google Drive? Di default NON è crittografato end-to-end. Va attivato manualmente.

La privacy non è solo il contenuto, è tutto l'ecosistema dati.

📖 jfkmdd.blogspot.com/2026/05/whatsapp-privacy-e-un-dettaglio-spesso.html

#Privacy #WhatsApp #Cybersecurity #EndToEndEncryption #DataProtection

RE: https://newsie.social/@LALegault/116633774813209580

“This is an important public service announcement related to your right to privacy … We the people have 1 day 16 hours 33 minutes 13 seconds to take action and influence this outcome.
…
For now, your encrypted messages have a lock on them.

Only you, and the person you're talking to, hold the key. Not the app. Not the company. Not the government. You probably don't think about it. That's the whole point — it just works.

Until, possibly, the end of this summer.

WHAT BILL C-22 WOULD DO

Every messaging app in Canada would be required to build a second key.”

Another effort to destroy end-to-end encryption, and thus your privacy, this time from Canada.

https://dontsurveil.me/c22.html

#canada #privacy #endToEndEncryption #backdoor

《Grundsätzlich ist aus Datenschutzperspektive die Einführung von #E2EE immer zu begrüßen. Dass aber ausgerechnet Textnachrichten nicht endgeräteseitig ent- und verschlüsselt werden, ist mindestens enttäuschend.》

#Discord: Ende-zu-Ende-Verschlüsselung als Standard, aber nur für Anrufe | Security https://www.heise.de/news/Discord-standardmaessig-mit-Ende-zu-Ende-Verschluesselung-fuer-Anrufe-11300087.html #End2EndEncryption #EndToEndEncryption #encryption #Verschlüsselung

#libomemo.js 0.0.1 has been released ( #OMEMO / #JavaScript / #XMPP / #Jabber / #E2EE / #EndToEndEncryption / #ConverseJS / #SecureCommunication ) https://github.com/conversejs/libomemo.js

#Apple :apple_inc: führt #RCS-Verschlüsselung in #iOS 26.5 ein: Das ist zu beachten | Mac & i https://www.heise.de/news/Ende-zu-Ende-Verschluesselung-fuer-RCS-mit-iOS-26-5-So-geht-s-11291023.html #encryption #Verschlüsselung #E2EE #EndToEndEncryption #End2EndEncryption #iOS265 #RichCommunicationServices

Instagram can now read all users’ private messages. Will this make kids safer or just boost ad targeting?

https://fed.brid.gy/r/https://interaksyon.philstar.com/trends-spotlights/2026/05/13/313329/instagram-can-now-read-all-users-private-messages-will-this-make-kids-safer-or-just-boost-ad-targeting/

#iOS 26.5, now available to all users, adds #endtoendencryption for #RCS messaging, a feature that will roll out gradually over the coming months. This update also includes new wallpapers, Apple Maps features, and more. https://9to5mac.com/2026/05/11/ios-26-5-adds-end-to-end-encryption-for-rcs-messaging-rolling-out-now/?eicker.news #tech #media #news

Google and Apple finally bring encrypted RCS chats to Android and iPhone users

https://fed.brid.gy/r/https://nerds.xyz/2026/05/google-apple-encrypted-rcs-iphone-android/

#Instagram Removes #EndToEndEncryption From #DirectMessages, Giving #Meta Access to Chat Content

:skype_giggle:

https://www.ghacks.net/2026/05/09/instagram-removes-end-to-end-encryption-from-direct-messages-giving-meta-access-to-chat-content//?utm_source=mas.to&utm_medium=social&utm_campaign=&utm_term=&utm_content=&utm_referrer=https%3A%2F%2Fmas.to%2F%40KNTRO&utm_id=&utm_creative=&utm_channel=mastodon_organic&utm_platform=desktop&utm_location=argentina&utm_language=es-ar&utm_variant=

#E2EE #Privacy #OnlinePrivacy #SocialNetworks

https://winbuzzer.com/2026/05/09/meta-u-turns-on-encryption-push-for-instagram-as-d-xcxwbn/

Meta ended encrypted Instagram DMs on May 8 and now tells privacy-focused users to move to WhatsApp.

#Instagram #WhatsApp #MetaInc #EndToEndEncryption #Encryption #Messaging #Privacy #DataPrivacy #Cybersecurity

《Als Erklärung dazu, warum die Ende-zu-Ende-Verschlüsselung nun nicht mehr möglich sein soll, liefert ein aktualisierter Facebook-Blog-Beitrag eine Antwort: Demnach haben nur sehr wenige Menschen die Möglichkeit der Aktivierung der Ende-zu-Ende-Verschlüsselung in Direktnachrichten genutzt.》
— Daraus könnte man auch schliessen, dass dieses feature vielleicht auch automatisch aktiviert werden sollte ohne Zutun des Anwenders :mastofacepalm:

Ende-zu-Ende-Verschlüsselung: #Instagram deaktiviert Privatsphärenschutz | Security https://www.heise.de/news/Ende-zu-Ende-Verschluesselung-Instagram-deaktiviert-Privatsphaerenschutz-11287210.html #Datenschutz #privacy #Verschlüsselung #encryption #E2EE #EndToEndEncryption #End2EndEncryption #SocialMedia