Discussing encryption with other people

Okay, so after just shrugging and not giving a fuarrrk about privacy for a while, mostly because of the insane amount of apathy I see in other people, I realized I shouldn't be so quick to give up. So I started using Signal again, I briefly used it but then gave up without really trying because that meant talking to people about encrypting their discussions. I've gotten three out of the six people in my house to use Signal (the other three have either no phone or a Windows Phone) and have had discussions with an uncle with an interest in tech about it too. I would like to spread the word as much as I can, I think the biggest hurdle is to explain WHY it's important to have discussions encrypted and how you aren't a bad guy if you don't want people to listen in on your discussions. So I was thinking about taking advantage of the little social media I do use and also spread the word through making a ton of friends and just occasionally talking about Signal as a gateway app into thinking about how they use tech. I think people value what I have to say enough to at least hear me out once on the matter. So, I really want to try. How have you guys talked about things like encryption to other people? Pic not really related, unless you want to have Signal chats with Noire or something.

>How have you guys talked about things like encryption to other people? The first step is to get people realizing the privacy is important. Most people don't know the scale or believe that because they haven't worth spying on they shouldn't worry. second step is to get people to talk to....

>>6356 That's the thing, I have plenty of people to talk to, and I'm willing to play the good Facebook userr if it means getting more people interested. So I was thinking, with anti-Trump sentiment at an all time high, I could tell people about Trump's stance on encryption and how that could effect them in the long run, even if they just talk about trivial stuff everyday.

>How have you guys talked about things like encryption to other people? With friends it has been easy, I simply told them that if they wish to communicate with me and we aren't face-to-face they have to use $application and I will walk them through how to use it. They are all pretty tech-savvy or at least willing to learn, so from there I just send them links to stuff I stumble across from time to time. With family on the other hand it is much harder. So far I have more or less just mentioned what I have heard/read about whenever it is appropriate since none are particularly tech-savvy (although at least one thinks he is simply because he knows how to turn a computer off properly). Most of them just use Facebook so its kinda pointless to discuss with them anything beyond the bare basics anyway. If they want to talk to me, I tell them to meet IRL instead of trying to train them on $application. I had one try to tell me that they have nothing to fear because of the "mountain" of data generated by millions of users obscuring their personal data. Trying to explain to them that this sort of thing can be easily sifted through with the average modern computer was way over their head. Man-in-the-middle attacks that inject malware are equally over their head unfortunately despite being a major reason for encryption. >>6356 Unfortunately just discussing the sheer scale of it takes longer than the average attention span of someone who's tech-illiterate. I lose people in 30 seconds let alone the 5 minutes or so it would take. Then again I am a pretty terrible speaker too. >>6358 Depends on the person and circumstances really. With some people it is exceedingly bad to discuss politics with, as it will lead to months of not talking even if you pretend to agree with them. Pandering to their personal beliefs is generally not a good idea either, especially when the truth is both sides want to eliminate encryption. For me it has been more effective to mention that $bad_people can do things with your data, which includes the "hacker boogeyman" and world governments (not just your own).

>>6353 Signal is the worst thing you can migrate to for "muh privaceeeeeeeeeeeeeeeeeeeeeeeeeee". This isn't just coincidence, when someone starts talking about secure communications, a bunch of obviously show up and start advertising their corporate spyware. Why Signal is bad? Well, first it's not an open server federation. Central server is located somewhere in US, so basically it doesn't suite any US citizen or people afraid of US secret agencies. Second, Signal is not free software, but "open source", this is a major issue, since putting your code on github and calling it "open" does not equalize it to having 0% of proprietary code. Signal ships with several proprietary binaries within. Third, it relies on Google push. Basically, every time you receive a message, A-corp gets a piece of metadata on you. Yes, you can opt-out, but it is turned on by default. Third, Signal uses phone number for registration. Why should it? Guess it your selves, because: a) users are tech-illiterate mongrels without e-mail, b) it's even easier to collect metadata since most people won't bother on getting burner phone number c) both DO NOT LISTEN TO SIGNAL S H I L L S. DO NOT. Use XMPP with OTR, an open protocol with federation of servers. There is also new replacement for XMPP, Matrix, but it has no good clients yet. >>6361 The worst problem with humans is that they would rather trust some authority, than an encryption algorithm. The government will save us from bad guys, comrade Durov, Mr Cloud, Mr. Kikeberg will sure keep our private data private for free and we should take their word for it because so. I think one should comprehend certain things about technology and encryption and understand that security is trustless, not trusted. Then it goes on and on, to free software ideologies and a bit of anarchist worldview. It's easier to make "bad guy" start using encryption, because he certainly "has something to hide", and ordinary people don't really know the full scale of system and what the system already knows of them, and if they do, they go full pessimist and say they have nothing to hide, since it is already pointless to hide. What's the silver bullet for convincing people? Do they deserve to be saved? Do they want to be saved? Once someone starts getting interest in, he may stop on "windows 10 telemetry removal tool 2018 edition by epikrussianhaxor99", ghostery as browser "privacy extension" and Signal as "secure messenger".

>>6363 Is Signal really that bad? If the messages are encrypted, then isn't that really good? https://en.wikipedia.org/wiki/Signal_(software) >From February 2014[26] to February 2017,[56] Signal's official Android client required the proprietary Google Play Services because the app was dependent on Google's GCM push messaging framework.[57][56] In March 2015, Open Whisper Systems moved to a model of handling Signal's message delivery themselves and only using GCM for a wakeup event.[58] In February 2017, Open Whisper Systems implemented WebSocket support into the client, making it possible for it to be used without Google Play Services.[56] It sounds usable enough, even if you have to use a phone number. I think it's way better than just texting like normal.

>>6363 >Use XMPP with OTR, an open protocol with federation of servers people who are technically minded know that already, we are talking about the majority of people who only know basic user software. For a vast majority of people apps like signal, wickr, and tox are plenty fine.

>>6367 Using XMPP with OTR is about as hard as using web browser with https, there are even foolproof mobile "apps" such as Conversations, ChatSecure that make it bloody simple and offer a sever for starters. It seems like most humans can't comprehend concept of username@servername, but are completely fine with app pulling phone numbers from their contact list. Just like vCard doesn't exist or something, right?

>>6368 Okay, I'll give XMPP with OTR a try. It's not like I've talked to a ton of people about this yet. I have to see if it's really easy for the general population for myself. I'm going to download a client and play around with it.

I went to a communist bookshop (to find a Babylonian/Syrian dictionary), and I demonstrated why its important. I did this by running airodump and only had to show them how easy it was to pick up there phones and where they have associated before. That was enough to get them really paranoid.

>>6353 It can be depressing how ignorant the general population is about this and related topics. My advice is to keep working on your "elevator pitch" for a while before acting. Find a few friends or anons who are interested in some of the software and test it well, figure out the core points new users need. I wouldn't make make your logos pathos egos "political" (eg trump-related). See if you can get your core arguments down to a couple of minutes, memorize talking points (ugh) for the main counterarguments, etc. And report back to us! :)

>>6370 That's awesome to be honest

>>6371 Yea, me and my family have enjoyed Signal. My own mom who likes the idea of video calling told me that it's way easier for her to actually video call people since all she has to do is hit the little camera button in the middle of a call. She really struggled with Skype back when I was a teen and likely would still struggle with it. I am glad I got some feedback in general about the political arguments, I mostly had that idea in my head because almost everyone I know is either completely against Trump or at least not completely positive about him. I personally don't like him but I really didn't like his reaction to the San Bernidino(?) encryption issue. Trust issues with Apple aside, Trump's reaction really bugged me. So I thought that while it's preaching to the choir, I thought it would help. I will be dropping politics from my discussions. Getting good points is important, yes. Delivery isn't as much of an issue, because my job deals with me discussing the pros and cons of various products for their house. I'm always honest about my biases and play a low pressure style to selling things with my friendly mannerisms. People respond very well to that. Now, I'm just trying to figure out how feasible XMPP with OTR is compared to Signal. I had little issues setting it up on my Windows laptop, but I also am the same kind of person who reads up on this stuff, has Linux experience, etc. I think maybe starting small community classes might help a lot more than just dumping people on a seemingly random program (from their point of view). I'm going to need some anons to work with XMPP with OTR. But there is no reason why a person couldn't just use both Signal and XMPP. Major hurdle is still getting people to join, even with Skype back in the day, I found it so hard to find people to talk with because most people use Facebook. Which isn't an issue, as I said, I'm going to take advantage of FB to at least raise awareness.

>>6363 signal is a replacement to texting. XMPP with OTR is not.

Moved to >>>/r/6110.