ambiguous_yelp

joined 3 months ago

Because anyone that contacts myusername@mydomain will know they are talking to the same person as a third party that messages that same user, so if those contacts are compromised then a third party could compromise your conversations by correlating them both to you even if the conversation was encrypted. And quantum matters now bc state and capital is hoovering up encrypted data in a strat called Harvest Now Decrypt Later bc they think theyll be able to decrypt it all for cheap in a few short years so its worth holding onto bc storage is cheap. https://en.wikipedia.org/wiki/Harvest_now%2C_decrypt_later https://www.youtube.com/watch?v=-UrdExQW0cs

Ive noticed a couple well upvoted comments relating to the the simplex VC funding so rather than repeat myself I will link the response I wrote already in this comment section https://vegantheoryclub.org/post/916089/1559879

[–] ambiguous_yelp@vegantheoryclub.org 1 points 4 days ago (2 children)

Is there any way to use xmpp such that it is post quantum encrypted at least? Even so it has persistent user ids right? That would still be a simplex advantage

I think you will be interested in the whitepaper, I will append it to the OP https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md I've read it and it satisfied me.

please see my comment above and the linked blogpost from evgeny

As an anarchocommmunist I hope they go non profit too, but the protocol is robust and decentralised enough that I'm not worried whatevever the company does it can just be forked. Look at Simple Mobile Tools for andoird, an open source project that sold out to a data harvesting company, within a few months it was forked and now you can get the exact same apps under the name Fossify. And then theres the example of Redhat a forprofit company that "sells linux" by providing techniocal consultation to large businesses. Idk anyone who would say that redhat linux is enshittified bc redhat is forprofit. Evgeny the lead dev has said several times this is the kind of model they want to pursue and they recognise privacy and anonymity is their only selling point, they are into right wing conspiracy theories too so they have an ideological reason not to sell out like that they actually believe in the right to privacy and anonymity. You may be interested in evgenys blog posts about this contention https://simplex.chat/blog/20240516-simplex-redefining-privacy-hard-choices.html

  1. If you switch relays you alienate the 99% of people on the central signal network who now have to put in extra work just to talk to you, simplex is decentralised by design anyone can use any relay they choose and the UI is seemlesss bc its handled in the invite link and handshake protocol. 2. Two ways contacts can be compromised, by the attacker simply looking at the phone numbers of you contacts, or if they use usernames instead they can subpoena signal to divulge the phone number associated with the username, from there its trivial to use either leaked phone details or subpoena the phone companies to get your personal details

This is an accurate list of the cons, but my title clearly states I am solely talking about privacy/anonymity goals. Of particular interest was the second bullet there I knew there was a timeout but I didnt think it was that short I will keep that in mind and perhaps suggest it be increased to like at least a couple months. Anyway yes simplex is not feature compatible with signal and matrix. that was not the point of the post. Imo though it IS good enough enough to replace bare bones direct messaging with trusted contacts as I have been using it like that for about 6 months now and it has only gotten more stable since then.

This is kind of black or white thinking to think that its only valuable to use simplex if every one of your contacts uses it. I think of digital privacy like plugging holes in a simking ship to some extent it doesnt matter if you dont get them all if you can bail water fast enough but the more you plug the better. I recommend the arguments in these videos as responses to "i have nothing to hide" https://www.youtube.com/watch?v=Hcqh0ZSza50 https://www.youtube.com/watch?v=0aXIXozAsOE but if everyone you could possible ask to add you on simplex is thinking like this that they don't want to be lumped in with criminals and what not then this is a disturbing trend that privacy is seen as suspicious

I understand the skepticism, the owner evgeny is a right wing conspiracy person but it has actually already had a security review you might be interested in https://simplex.chat/blog/20241014-simplex-network-v6-1-security-review-better-calls-user-experience.html also because of the decentralised design it is easier to run a simplex relay than a matrix homeserver for example hackliberty.net runs private relays for simplex. All in all I think you're right to be skeptical of a for profit enterprise but evgeny has said several times they have no intention to profit from user data, they recognise that privacy and anonymity is p much their only selling point so theyve said they want to make profit selling consultations and techniocal expertise to large corporations, kinda like how redhat "sells linux" i guess https://simplex.chat/blog/20240516-simplex-redefining-privacy-hard-choices.html as an anarchocommunist I dont agree with some of the views in this blogpost but I think reading it is a good way to dispell some of the skepticism

 

The following is a cross-post from my mastodon thread

In the wake of metas enshitiffication I have seen people recommend Signal and Matrix as private open source alternatives to meta products. In the following thread I will outline how if your goal is software freedom anti surveillance and anti censorship the best option for direct and group messaging is neither Signal nor Matrix but instead the up and coming https://simplex.chat/

Signal is centralised meaning its vulnerable to censorship it almost got backdoored by uks online safety bill and that bill still has a damocles sword clause hanging over signal. Signal is also not anonymous, your account is linked to you through your phone number, if your contacts are compromised then your conversations can easily be linked back to you and your contacts all be correlated. In contrast simplex is like having "a burner phone for every contact" meaning even if one contact is correlated you have no consistent identity that can be compromised by default. Also simplex has a custom onion routing protocol to hide your ip from relay servers by default and it makes it very easy to connect over tor if simplex is blocked in your country im pretty sure signal doesnt do that. Matrix has been floated as potentially being a decentralised and e2ee open source alternative to Signal, but Signal shares one massive pro with SimpleX which is that both have post quantum encryption meaning that quantum computers that many researchers say are a few short years away from being able to decrypt all historical data that is encrypted using classical techniques ie not post-quantum encryption - such as the private messages you are sending across matrix today Afaik Matrix currently has no plans to add post quantum (PQ) encryption today and previously they were relying on it being implemented in MLS a standard that Matrix has been trying to adapt to their decentralised framework for years with stagnant process. Whats more afaict the motion to add PQ to MLS quietly expired and wasn't renewed so it's likely not coming any time soon. SimpleX has PQ on top of their classical encryption implemented and working today and you can download the app and have PQ rn (the additional classical encryption is insurance in case it turns out PQ has some classical attack vector, hybrid encryption is recommended by sec researchers at this stage) In conclusion both Signal and SimpleX are PQ unlike matrix but SimpleX and Matrix are decentralised and less vulnerable to censorship than Signal, while only SimpleX supports Tor connections and protects ur IP with or without Tor, and has no persistent unique identifier creating a "burner phone for every contact" scenario where compromised contacts cant necessarily be used to correlate ur other contacts/groups simply by looking at ur phone number/username in those groups

Heres some evidence and argumentation to support building post quantum encryption now, state and capital are hoovering up encrypted data rn to decrypt for profit as soon as it becomes cheap enough to do so with quantum computers https://www.youtube.com/watch?v=-UrdExQW0cs

And here's the best explainer of SimpleX on youtube, sorry about the racist thumbnail the guys a right winger but his knowledge on OPSEC is valuable. If you don't know why the thumbnail is racist search "Terry Davis glow in dark" (the search results for which I have to give a racist slur cw for but theres no slurs in this video) https://www.youtube.com/watch?v=0cRu98XSap0

edit: see whitepaper for technical privacy details https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md

 

I noticed we have a discord link but not a matrix or simplex link? Also the spreadsheet is done on google sheets, I just did like 5 seconds of research so I could be wrong but it looks like baserow is an open source alternative that has self hosting a free tier to use their hosting for small projects like the one linked in the server description.

I don't want to toot my own horn but there is already a direct democratic matrix space #vegan.en:tedomum.net run according to anarchist principles and I could have sworn it used to be listed in the server description here like a year ago

Anyway just a quick post to ask what are peoples thoughts on FOSS in the vegan movement because I think its essential to support the privacy needs of our comrades doing direct action

 

If you've read my previous post detailing my process of discovering that plastics, paper, cardboard, inks, dyes, glues and ceramics all can contain animal products - not just their excretions, in each of these cases flesh and bones may be used - then you may be remembering an argument vegans sometimes get which is that no one can be 100% vegan. While this is a nirvana fallacy it has got me thinking these last couple months as to what the limit of individual responsibility is.

In the past I have said vegans shouldn't wear leather even if they already bought it because it is commodification and objectification and a strong psychological indicator that leather as a concept is OK on some level.

But if we extend this logic to the keyboard I'm using to type this, what if the plastic contains traces of tallow used in plastic manufacturing, is that disrespectful to the animals that died? OK maybe you could argue it doesn't make much of a different now, "maybe", you say, "the animal flesh content is so low and not even confirmed so the psychological/signalling impact is minimal right" ignoring the fact that turns the victim's deaths into a numbers game, who die to have their tortured bodies desecrated into the very materials that literally surround our entire lives in this death cult society (most of us at least), so yeah ignoring that this argument says "its OK because its only a little bit of dead animal" what about new purchases?

The other week my mouse broke, I use it with my laptop because I find it much more convenient than the track-pad, and playing Mineclonia is basically impossible without it. But, for most use cases I can get by with a keyboard, I use a tiling window manager so most of my computer navigation is done by keyboard anyway. Anyway my point is, how could I justify paying for what is probably dead animal parts in the plastic, inks, and then the cardboard and inks the mouse comes in. So I tried contacting Razer and Steelseries, Razer was more promising but eventually both admitted they could not answer my question and promised to look into it in the future and provide information on their website (I'll believe it when I see it) I've yet to contact Asus, Logitech and probably a bunch of other manufacturers but at the moment its just more effort than its worth I spent weeks going back and forth with Razer to no avail, and what if Asus and Logitech don't know either? I know this is a pessimistic way to think and I should just try contacting them because this is the only way things will get better if we just start by asking.

But thats not all, I recently lost my better hairbrush and haven't even begun looking for a vegan one yet due to lack of motivation, I'm on my last hair bobble and I don't know any vegan options for that either.

I'm sorry this sounds like complaining and it mostly is but my point is basically the anti vegan point but from the other side: it is hard if not impossible to be 100% vegan, but that doesn't mean we shouldn't try right? like individually none of these things justify killing an animal if I stood in front of a pig I couldn't say I'm sorry I've got to crush your bones into black ink to print a brochure manual for my new mouse because its slightly more comfortable than my laptop track-pad, while that is true taken in aggregate this is a very difficult moral principle to uphold,

I'm not asking for permission to buy these things and I'm not going to suddenly become an ex vegan, but I'm angry at this society that they put dead animal parts in so much, that they make people unwitting participants in their death cult, what about for example if I go to a restaurant and restaurants have chairs right? and those chairs are either plastic or they may have leather or non vegan wood veneer or wood glue. Eventually these will need replacing. But wait I hear you say, "that's not part of what you're paying for so there is no supply demand relationship there! That's a choice the restaurant makes independently of a vegan customers choices" is it independent though? lets imagine two restaurants one selling vegan options and one owned by a vegan cooperative, the owners have down their best to source as many vegan materials as they can for their vegan decor, they only use vegan cleaning products even their menu leaflets are printed with soy ink on vegan paper, this is all great but now lets say vegans go to the non vegan restaurant thinking they are only responsible for the things they directly pay for: of course the non vegan restaurant is more popular because it caters to a wider group of people, and within a few years the vegan restaurant closes down: now there's one less restaurant in the world actually committed to vegan ideals. So through this story I think we can come to understand that although non vegan components of businesses are not practiced for us they are practiced on out behalf, which makes us culpable, essentially washing the blood from our hands for a practice we know is happening on our behalf but we choose to ignore as not out responsibility.

So where am I going with this tangent about restaurants: well given the prevalence of potentially non vegan materials: items like computer equipment, tyres and shipping/packing materials may also technically be non-vegan, and if we can reasonably assume there's a good chance non vegan computer equipment or tyres were put through use and wore down, then we can surmise that a fraction of any purchase we make goes towards buying new tyres of hard-drives, now if we were making those purchases we would get Michelin tyres https://veganfoundry.com/are-tyres-vegan/ or Seagate hard-drives (contact my simplex for the correspondence screenshots) but since we don't know what decisions these companies are making and 99% of people aren't vegan the odds are good that a fraction of your money went to buying new tyres or hard-drives or whatever else that contains animal flesh.

What about this very site even? Despite the owners themselves presumably being vegan are they even aware that the hard-drives may contain animal products? Does me posting this contribute to the ongoing objectification and commodification of animal victims flesh in the plastic manufacturing industry?

I don't have these answers and I'm feeling totally lost. My only hope is that more vegans will take at least some steps to ameliorate these issues perhaps by contacting companies, I myself will be recontacting the companies that confirmed the vegan status of their products and packaging and asking them if they would include this information on their FAQ pages as soon as I can get the motivation to do that

NB The attached image is the first published book to be certified vegan, so at least I can buy that item with a clear conscience probably haha

SimpleX Contact: https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FUkMFNAXLXeAAe0beCa4w6X_zp18PwxSaSjY17BKUGXQ%3D%40smp12.simplex.im%2FADxWlMmoMmzsMG8isEJ_l_w9fnE7wh4N%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAZnCpc3cQa4VLOwxhQ8TW5n8jQsspX3OeRSBxmn-F9k0%253D%26srv%3Die42b5weq7zdkghocs3mgxdjeuycheeqqmksntj57rmejagmg4eor5yd.onion

 

A couple of months ago I managed to convince a new friend to go vegan and I was 4y vegan at the time. A couple weeks in they asked me a question out of the blue "hey are pens vegan" and my first thought was well I suppose they could maybe be tested on animals, after all you don't want an ink that would hurt you if you get it on your skin, but what I found was even more disturbing, inks and dyes of many colours can come from various animal sources from crushed insects (cochineal) to bone char in black ink https://veganfoundry.com/is-ink-vegan/ and from weirder sources like snails octopi and cow urine https://en.wikipedia.org/wiki/Natural_dye

Little did I know at the time this would send me down a rabbit hole where I soon learned one by one that papers and cardboard (including toilet paper) use animal flesh as a binding agent https://veganfoundry.com/is-paper-vegan/ https://veganoga.com/is-paper-vegan/ that inks and dyes of all kinds not just pens but printers tattoos ink and hair dyes can contain animal products

So at this point I had a sinking feeling in my stomach, I had this suspicion that due to the relatively niche nature of this information are the vegan certifying orgs even checking product packaging? So I contacted the vegan society by email: " A product's packaging does fall out of the scope of the Vegan Trademark’s standards as there are very few verified options that are widely available. We would however question and potentially reject a registration that goes on to use packaging which is directly sourced from animals." huh? the vegan society probably one of the most outspoken advocates of the rights of vegans is essentially misleading vegans into buying things they think are free from animal products but in reality due to the prevalence of animal based inks papers and glues many vegans may be unwittingly buying animal products that have the Vegan Society stamp of approval, so I tried the vegetarian society: "Our vegetarian and vegan trademark criteria look exclusively at a product’s consumable/usable ingredients and their suitability for vegetarians and vegans. They do not extend to a product’s packaging." then I tried v-label and their response is written out in full in the attached image, if anyone would like the full email transcripts I will post my contact at the end.

Now I'm feeling sad that society has reduced animals lives to worth less than the printing on a box of packaging or literally less than toilet paper we wipe our ass with, I'm feeling angry at the psychopaths that made these manufacturing decisions to save a couple cents on some random box or spaghetti, and I feel betrayed by the vegan society who up until this point I really looked up to as a relentless advocate for animals.

But wait a minute, did I just say glue? Isn't glue in basically everything? If I want to buy a new hairbrush how do I know its using vegan glue? I suppose I could email the companies, so that's what I started doing, to this date I have emailed, phoned or otherwise contacted over 100 companies trying to get to the bottom of animal product use thus far seemingly largely ignored by vegans, because that's the other thing, if you search for posts relating to ie vegan toilet paper or where to find information about vegan packaging there is shockingly little information about this online which is part of why I'm making this post to collate my findings.

So I start emailing these companies one of the first companies I contact is Huel who respond positively they say yes our packaging is vegan we are a 100% vegan product. I continue to contact many companies most of whom either ghost or refuse to investigate saying boilerplate responses like "we don't have the certification/we can't confirm with our supply chain/customer service doesn't have that information" but I do get some early postive responses from Greggs, BarryM, Seagate, Warburtons, Oatly, littlesoapcompany.co.uk, LUSH, Linda McCartney, and to this day that is the exhaustive list of companies that have verbally guaranteed the vegan status of their entire product line's packaging (Please note time of writing is 2024 this information may be outdated if you are reading in later years), other companies were able to provide a guarantee for specific products when they asked me to specify a product.

In one case I escalated to phoning the physical head office of a grocery story company I think it was ALDI (UK) and they advised me to restate my question to customer services but give them an exact product, and I'm like what you expect me to give you a list of your own products when you know I'm asking about everything, 90% of ALDI's products are owned by the company but it turns out their manufacturing is actually contracted to many smaller companies to whom ALDI would have to contact individually to find out about the packaging material. OK fair enough, so I continue to phone ALDI customer service until they eventually say "if it says vegan on the product then the packaging is vegan too" that remains to date my biggest win.

At some point during this process I also learned that plastics contain stearic acid as a slip agent which can be derived from vegetable fats but is instead often derived from "tallow" (flesh) https://veganfoundry.com/is-plastic-vegan/ https://www.pishrochem.com/blog/en/stearic-acid-and-the-plastic-industry/ or as a plasticity agent like this one used in PVC https://bisleyinternational.com/how-is-calcium-stearate-used-in-pvc/ (honestly theres so many plastic additives it wouldn't surprise me if there were more derived from animals)

I would soon learn from correspondence with PZ Cussons and their brand Carex - an ostensibly vegan friendly brand when you look at the sheer number of their soap products certified by the vegan society - that the process of using tallow in plastic packaging production is "common unfortunately, throughout the industry" for a diverse range of plastics PP, PE and MDO.

So I continued getting red-pilled, I learned tyres can be non vegan for the same reason, wallpaper, wood veneer, ceramics (they can use bones https://www.ethicalglobe.com/blog/what-is-vegan-pottery) and then I started bringing it up to online vegan friends and I was surprised to learn that few if any were aware of this, which is why I've taken to borrowing Humane Hancock's term "Vegan Blindspot" (originally in reference to the problem of wild suffering)

My goal's for this post are 3

  1. Raise awareness to the utterly entrenched nature of animal products in our society (how many times have vegans unwittingly commodified animal flesh by using plastics or glues or paper?)
  2. Encourage vegans to follow me in contacting customer support teams to demand action so that the notion of non vegan toilet paper etc can be a thing of the past and to that end:
  3. Begin a conversation about how best to share our findings (perhaps ultimately in pursuit of a community operated database split by world regions), I have contacted doublecheckvegan and plantbasednews with this information and offers to provide my email records neither have replied

I don't use lemmy very often in fact I made this account just to post this but I will check in to the state of this post for a while and if I don't respond here I will create a simplex address you can contact me through (simplex is the most private secure and anonymous open source messenger that I'm aware of better than briar and cwtch and session and matrix)

I will end by posting the only FAQ page I have ever seen confirming the vegan status of a product lines packaging as well as product: https://support.whogivesacrap.org/hc/en-au/articles/11902182808217-Are-your-products-vegan

edit: related cool and good news: the first cardboard packaging company to be officially certified by the vegan society https://www.smurfitkappa.com/uk/products-and-services/packaging/vegan-certified-packaging the first book to be certified by the vegan society ie that the paper adhesives and inks are vegan: https://www.vegansociety.com/news/news/vegan-trademark-registers-book-materials-world-first

edit 2: idea for a preliminary community vegan product status database: member submitted posts on a moderated simplex room containing a list of what they've found to be vegan so far and then an attached zip file for email proof or whatever other proof

edit 3: useful list of items and materials that may not be vegan including items I didn't talk about above: Reference: plastic is not always vegan https://veganfoundry.com/is-plastic-vegan/ ; https://www.pishrochem.com/blog/en/stearic-acid-and-the-plastic-industry/ ; https://bisleyinternational.com/how-is-calcium-stearate-used-in-pvc/ paper is not always vegan https://veganfoundry.com/is-paper-vegan/ inks/dyes are not always vegan https://veganfoundry.com/is-ink-vegan/ ; https://en.wikipedia.org/wiki/Natural_dye glues are not always vegan https://bitesizevegan.org/is-glue-made-from-horses-vegan-glue/ Ceramics/Pottery are not always vegan: https://www.oxfordclay.co.uk/blog-1/blog-post-title-one-2ess6 Tyres are not always vegan: https://veganfoundry.com/are-tyres-vegan/ Various arts and crafts tools are not always vegan like pens pencils brushes paints crayons chalk https://chompthis.com/ingredient/?id=773 https://doublecheckvegan.com/vegan-art-supplies/#veganchalk Makeup brushes are not always vegan: https://ethicalelephant.com/vegan-makeup-brushes/ Shaving brushes and razors are not always vegan: https://vegan.com/beauty/shaving/

Household Products

https://doublecheckvegan.com/guide-to-vegan-household-products/

Art Supplies

https://www.artsupplies.co.uk/blog/the-ultimate-guide-to-vegan-art-supplies-for-conscious-creatives

Musical Instruments

https://vegantheoryclub.org/post/475246

Simplex Contact https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FUkMFNAXLXeAAe0beCa4w6X_zp18PwxSaSjY17BKUGXQ%3D%40smp12.simplex.im%2FADxWlMmoMmzsMG8isEJ_l_w9fnE7wh4N%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAZnCpc3cQa4VLOwxhQ8TW5n8jQsspX3OeRSBxmn-F9k0%253D%26srv%3Die42b5weq7zdkghocs3mgxdjeuycheeqqmksntj57rmejagmg4eor5yd.onion--