Secure communication devices

[JohnnyDoe]

Most security tools can be found inside a dedicated device working on a closed network with private servers. There are a few companies offering this (@CEO would be nice if you can review them in separate threads), some even offer white-label programs, allowing consultants and third party marketers to resell the products to their own clients.
However, we all know the story of Anom, so how can we trust a company with our privacy?

 

[CEO]

Most security tools can be found inside a dedicated device working on a closed network with private servers. There are a few companies offering this

Give me an example.

(@CEO would be nice if you can review them in separate threads), some even offer white-label programs, allowing consultants and third party marketers to resell the products to their own clients.

Yes. Some experts in cyber security have partnership with those companies, I am exploring some, few of them are for personal use, it's only for enterprises.
I like white-label concept only if the project is valuable and has great value, I have to say great tools are free of charge and Self-hosted and are great option for paranoid people.

However, we all know the story of Anom, so how can we trust a company with our privacy?

I share my proper opinion. There is no full privacy especially in cloud, even open-source projects are protected, security firms can also play the adversary role.

That’s why I mentioned a broad title, there is no such private or secure device or project, it's all about elite mindset and how we understand how things are going.

Examples.

XZ Backdoor
Open source project called. XZ Utils provide a general-purpose data-compression library

So, security is a mindset before technical skills. That's what I wanted to say.

How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations
Security tool converted into surveillance tool.

 

[JohnnyDoe]

Bittium Tough Mobile™ 2 C - Highest Level of Mobile Security

Bittium Tough Mobile™ 2 C smartphone provides the highest level of privacy and security for people working in the security, authority or government sectors.

www.bittium.com

Purism - – Librem 5

Introducing the – Librem 5 by Purism

puri.sm

Blackphone PRIVY - Encrypted OS

The NEW Blackphone PRIVY provides more privacy than any other smartphone. If you need secure uncompromising communication and data encryption, you need the PRIVY. The Blackphone PRIVY 2.0 runs on a 1, 3, 6, or 12-month subscription-based OS, and includes its own secure and unlimited...

www.encrypted-os.com

etc

Reinventing mobile security - Secure Group

Secure communication solutions that provide absolute data security and communication privacy for businesses, governments, and individuals.

securegroup.com

good company. I had the opportunity to visit their data center, talk with the founder and tech guys, and I was offered to inspect their software. The custom self hosted solutions are very interesting.

 

[JohnnyDoe]

Yes. Some experts in cyber security have partnership with those companies, I am exploring some, few of them are for personal use, it's only for enterprises.

Big enterprises but also SME, for example law firms, can benefit from such products.
Also private individuals (who anyway own their own company in 99.99% of cases) who are wealthy enough to be professionally organized, for example with their own family office.

There is no full privacy especially in cloud,

If the entire system is directly controlled and self hosted you can achieve a pretty good level of privacy.

security firms can also play the adversary role.

Yes, that's the risk I mentioned when I cited the Anom case.

So, security is a mindset before technical skills. That's what I wanted to say.

100%, and goes beyond technology.

How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations
Security tool converted into surveillance tool.

Classic.

It's naive to think that you can succeed in a fight against the unlimited resources of LE.
Sun Tzu: "If we do not wish to fight, we can prevent the enemy from engaging us… All we need do is to throw something odd and unaccountable in his way."

 

[CEO]

Big enterprises but also SME, for example law firms, can benefit from such products.
Also private individuals (who anyway own their own company in 99.99% of cases) who are wealthy enough to be professionally organized, for example with their own family office.

Yes. Right

If the entire system is directly controlled and self hosted you can achieve a pretty good level of privacy.

Yes, if they failed to attack the system they will try hack the human.

Yes, that's the risk I mentioned when I cited the Anom case.

This is a big problem, the anti virus company code some good malicious softwares for educational purposes. 😉

100%, and goes beyond technology.

I always questioning, and thinking out of the box.

Classic.

It's naive to think that you can succeed in a fight against the unlimited resources of LE.
Sun Tzu: "If we do not wish to fight, we can prevent the enemy from engaging us… All we need do is to throw something odd and unaccountable in his way."

💯
People are losing their minds, I respect the laws.

I am writing a post here about the devices mentioned.

 

[JohnnyDoe]

People are losing their minds, I respect the laws.

Martin Luther King Jr., Letter from Birmingham Jail (1963): “One has not only a legal but a moral responsibility to obey just laws. Conversely, one has a moral responsibility to disobey unjust laws”.

Thomas Jefferson, in a letter to Albert Gallatin (1787): “If a law is unjust, a man is not only right to disobey it, he is obligated to do so”.

 

[CEO]

Martin Luther King Jr., Letter from Birmingham Jail (1963): “One has not only a legal but a moral responsibility to obey just laws. Conversely, one has a moral responsibility to disobey unjust laws”.

Thomas Jefferson, in a letter to Albert Gallatin (1787): “If a law is unjust, a man is not only right to disobey it, he is obligated to do so”.

Of course. The law that respects human beings.

 

[JohnnyDoe]

John Locke is the ghostwriter behind half of modern political rebellion. In his Second Treatise of Government (1690), he makes it clear: people are born with natural rights: life, liberty and property. Governments only exist to protect those rights. If a government stops doing that and instead becomes a threat, it forfeits its legitimacy. Citizens then regain the authority they originally ceded and may alter or abolish the regime.

This was dynamite in the 17th century, because it openly contradicted the divine right of kings. By Locke’s reasoning, a monarch wasn’t God’s agent on earth but a kind of contractor hired by the people. If the contractor starts burning down the house, you fire him.

Fast forward to 1776: Jefferson, Adams, and the rest of the gang basically plagiarized Locke. “Life, liberty, and the pursuit of happiness” is just Locke’s “life, liberty, and property” with a poetic spin. The whole Declaration of Independence is almost verbatim Locke: governments derive power from the consent of the governed, and when they go rogue, the people have the right and the obligation to rebel.

 

[CEO]

I had the opportunity to visit their data center, talk with the founder and tech guys, and I was offered to inspect their software. The custom self hosted solutions are very interesting.

I am going to check the following requirements and back to you with conclusion. It takes time and energy but worth it.

. The company has clean history, open-source contributor.
. Leaks, uncover the hidden good and malicious practices.
. Green light. Independent third party audit.
. Security experts thoughts, reddit users opinions.
. Conduct my own due diligence.

I believe it gives only 70% of good privacy.
The next step is : secure network.

 

[CEO]

Some even offer white-label programs, allowing consultants and third party marketers to resell the products to their own clients.

Thank you for the idea, I will share with you more details in private.

 

[CEO]

The next step is : secure network.

@JohnnyDoe

 

[JohnnyDoe]

Products | shop.nitrokey.com

shop.nitrokey.com

They also offer consulting services: Consulting Services

 

[CEO]

Products | shop.nitrokey.com

shop.nitrokey.com

They also offer consulting services: Consulting Services

I spoke to Alexandra, she gave me some answers I wanted to know.

 

[CEO]

Update:

Nitrokey.com response.

For NetHSM: Frequently Asked Questions (FAQ) - Nitrokey Documentation
For NK Storage, the box "Independent Security Assessment" at Nitrokeys
For the NitroPhones I would suggest that you look at this:

GrapheneOS Frequently Asked Questions

Answers to frequently asked questions about GrapheneOS.

grapheneos.org

 

[CEO]

I see that lineageos.org will have a good future, but still no audit mostly for budget related issue. Reddit
It's open source and compatible with different devices.

 

[CEO]

https://frame.work is having a bad time.

BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices

BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterprise

Eclypsium researchers have discovered UEFI shells, authorized via Secure Boot, on Framework laptops. The UEFI shells contain capabilities that allow attackers to bypass Secure Boot on roughly 200,000 affected Framework laptops and desktops.

eclypsium.com

 

[CEO]

FSF announces librephone project — Free Software Foundation — Working together for free software